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Description 
TECHNICAL FIELD 

[0001] The present invention relates to a marking 
forming apparatus, a method of forming a laser marking 
to an optical disk, a reproduction apparatus, an optical 
disk, and a method of manufacturing an optical disk, 
which may be utilized, for example, to prevent duplica- 
tion of optical disks. 

BACKGROUND ART 

[0002] NL-A-9 1 01 358 discloses an optical disk pro- 
vided with a marker in the storage layer. The marker has 
elements which are positioned randomly, and marking 
information relating to the position of the marker ele- 
ments are recorded on the disk for later use. The storage 
layer of the disk is read in a reflective way. The marking 
is utilized as an indication of genuineness. 
[0003] With increasing use of ROM-type optical disks 
in recent years, pirated disks have also been spreading, 
infringing the rights of copyright owners. 
[0004] This is because ROM disk manufacturing ap- 
paratus have been made readily available and also have 
become easy to operate. 

[0005] A pirate can make a CD master disk just by 
extracting logic data from software contained on a CD, 
copying it onto a magnetic tape, and setting the tape on 
a mastering apparatus. Hundreds of thousands of pirat- 
ed disks can be pressed from this single master disk. 
Since pirates do not pay royalties, they make a profit by 
selling pirated disks at a low price. This necessarily 
means a financial loss to the copyright owner. 
[0006] According to the current CD specification , only 
the function of reading logic data from a CD is provided, 
but no functions are provided to detect physical features 
of a disk. As a result, a pirated CD can be easily pro- 
duced by bit-copying the logic data. 
[0007] The prior art discloses a method of preventing 
piracy by adding a function to recognize disk physical 
features. 

[0008] This method involves establishing a new spec- 
ification that defines the inclusion of a physical mark on 
a master disk to prevent the pirating of disks made to 
this specification. As an example of the prior art, a piracy 
prevention method is known such as the one disclosed 
in Japanese Patent Unexamined Publication No. 
5-325193. 

According to that method, in the cutting process the re- 
cording beam is deliberately swept in the tracking direc- 
tion, when recording a designated region, to form a wob- 
bling on the master disk. When the disk is played back 
on a reproduction apparatus equipped with a wobbling 
detection circuit, the disk is checked to see whether the 
wobbling is formed in the designated region. If it is de- 
tected that the wobbling of a designated wobbling fre- 
quency is formed in the designated region, the disk is 



judged to be a legitimate disk; otherwise, the disk is 
judged to be a pirated disk. 

[0009] More specifically, based on predefined physi- 
cal mark design data, a physical mark is formed on the 

5 masker disk by using a special mastering apparatus 
equipped with a wobbling function. This prevents pirates 
from making pirated disks since they do not have such 
special mastering apparatus nor physical mark design 
data. Such an anti-piracy mark needs to be formed on 

10 every disk made to this specification. However, since it 
is possible to extract this physical mark by examining a 
legitimate disk, the prior art method has had the problem 
that pirated disks may be made if such a special mas- 
tering apparatus falls into the hands of an illegal person. 

is in this patent specification, piracy prevention methods 
of the type that forms a physical mark on the master disk 
will be referred to as master disk level methods. 
[0010] Besides the above-described method, there 
has been proposed a more sophisticated master disk 

20 level method which involves forming a more complicat- 
ed physical mark. On the other hand, a replica method 
is known that makes a replica having exactly the same 
physical features by melting the resin of a legitimate disk 
no matter how complicated the physical mark is made 

25 at the master disk level. This method requires much time 
and cost to produce one master disk, but since hundreds 
of thousands of disks can be produced from one pirated 
master disk, the cost per pirated disk is low. This has 
therefore given rise to the problem that as the replica 

30 method becomes widespread in the future, it may defeat 
the effectiveness of piracy prevention techniques at the 
master disk level. 

[0011] As described above, the prior art piracy pre- 
vention techniques have several problems to be over- 
35 come. 

[0012] These problems are summarized below. 
[0013] Problem 1: The effectiveness of the master 
disk level piracy prevention techniques of the prior art is 
low since it is possible to replicate the physical mark. 

40 [001 4] Problem 2: In the prior art method that forms a 
physical mark based on physical mark design data, if a 
manufacturing apparatus of the same precision as the 
apparatus used by the legitimate disk manufacturer is 
obtained, illegal disks can be easily manufactured. 

45 [001 5] Problem 3: Since the security level provided by 
the prior art piracy prevention methods is fixed, its ef- 
fectiveness decreases against constantly improving pi- 
rating techniques. 

[0016] Problem 4: If a disk format without copy pro- 
so tection were allowed to exist along with a disk format 
with copy protection, pirated disks could be made with 
the disk format without copy protection. It has therefore 
been necessary to produce all disks with copy protec- 
tion. The use of copy protection is therefore limited to 
55 closed specifications such as game disks. 

[0017] Problem 5: According to the prior art methods, 
a limited number of licensing companies possess the 
special manufacturing apparatus and do not make the 
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apparatus public. Therefore, software makers cannot 
make disks except at the licensing companies. 
[001 8] Problem 6: In the master-disk marking method, 
all disks pressed from the same master disk have the 
same disk ID. This means that all disks can be run by 
using the same password. As a result, password secu- 
rity cannot be maintained unless a floppy disk or a com- 
munication line is used in combination. Furthermore, the 
password has to be entered each time the disk is used 
since secondary recording is not possible. 

DISCLOSURE OF THE INVENTION 

[0019] In view of the above-outlined problems of the 
prior art, it is an object of the present invention to 
achieve a greatly improved copy prevention capability 
as compared to the prior art. 

[0020] More specifically, the present invention pro- 
vides the following means to overcome the above-out- 
lined six problems of the prior art piracy prevention 
methods. 

[0021] To overcome Problem 1, a piracy prevention 
method involving the use of a physical mark at a reflec- 
tive film level, rather than the master disk level physical 
mark as used in the prior art, is provided wherein the 
physical mark is formed on a reflective film of a disk. 
This prevents the production of pirated disks if duplica- 
tion is made at the master disk level. 
[0022] To overcome Problem 2, a new ROM-record- 
ing means is used that performs secondary recording to 
a two-disk laminated ROM disk by using a laser. In a 
first step, physical marks are randomly formed, and in 
a second step, the physical marks are measured with a 
measuring accuracy as high as 0.1 3 urn. In a third step, 
their position information is encrypted and, using the 
secondary recording means, a barcode is recorded to 
the ROM disk with an accuracy of several tens of mi- 
crons which is the usual processing accuracy. Optical 
mark position information can thus be obtained with an 
accuracy of, for example, 0.1 nm, much higher than the 
processing accuracy of a conventional apparatus. Since 
optical marks cannot be formed with the accuracy of 0. 1 
^m by using commercially available equipment, produc- 
tion of pirated disks can be prevented. 
[0023] To overcome Problem 3, both a first-genera- 
tion cipher with a low degree of security and a second- 
generation cipher with a high degree of security, each 
enciphering the position information with a digital signa- 
ture, are prerecorded on a medium and by using such 
a medium, piracy is prevented with the security corre- 
sponding to the applicable generation if the design of 
reproduction apparatus changes from one generation to 
the next. 

[0024] To overcome Problem 4, an anti-piracy func- 
tion identifier for indicating whether or not the software 
product is equipped with a copyright anti-piracy function 
is recorded on the master disk. To prevent the identifier 
from being altered, compressed information of software 



contents and the anti-piracy function identifier are 
scrambled and encrypted together when recording the 
software contents on the master disk. Since the identi- 
fier cannot be altered, pirates cannot produce disks with 
5 a disk format without anti-piracy measures. This pre- 
vents the production of pirated disks. 
[0025] To overcome Problem 5, as a secret key for 
digital signature encryption indispensable for the man- 
ufacture of disks, a subkey is generated from a master 
10 key, and the subkey is delivered to each software maker, 
thereby allowing the software maker to manufacture le- 
gitimate disks at its own factory. 
[0026] To overcome Problem 6, position information 
of an antipiracy mark of the invention, which differs from 
is one disk to another, is used as a disk identifier. The po- 
sition information and the disk serial number, i.e., the 
disk ID, are combined and encrypted together with a dig- 
ital signature, thus appending an unalterable disk ID to 
each disk. Since each completed disk has a different ID, 
20 the password is also different. The password does not 
work on other disks. This enhances password security. 
[0027] Also, with the secondary recording of the in- 
vention, the password is secondary-recorded on the 
disk, permanently making the disk an operable disk. 
25 [0028] Specific methods for overcoming the above six 
problems are disclosed below by way of embodiments. 
[0029] The invention provides a marking forming ap- 
paratus as set forth in claim 1 . 
[0030] The invention also provides a method of form- 
30 jng a marking on an optical disk as set forth in claim 1 1 . 
[0031 ] The invention also provides a reproduction ap- 
paratus as set forth in claim 17. 
[0032] The invention also provides a method of man- 
ufacturing an optical disk as set forth in claim 13. 
35 [0033] The invention also provides an optical disk 
wherein at least one marking is formed, as set forth in 
claim 15. 

[0034] Preferred embodiments are subject matter of 
the respective dependent claims. 

40 

BRIEF DESCRIPTION OF THE DRAWINGS 
[0035] 

45 Figure 1 is a diagram showing a disk manufacturing 
process and a secondary recording process ac- 
cording to the present embodiment; 
Figure 2(a) is a top plan view of a disk according to 
the embodiment, (b) is a top plan view of the disk 
50 according to the embodiment, (c) is a top plan view 
of the disk according to the embodiment, (d) is a 
transverse sectional view of the disk according to 
the embodiment, and (e) is a waveform diagram of 
a reproduced signal according to the embodiment; 
55 Figure 3 is a flowchart illustrating a process of re- 
cording encrypted position information on a disk in 
the form of a barcode according to the present em- 
bodiment; 
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Figure 4 is a diagram showing a disk fabrication 
process and a secondary recording process (part 

1) according to the present embodiment; 

Figure 5 is a diagram showing the disk fabrication 
process and the secondary recording process (part s 

2) according to the present embodiment; 

Figure 6 is a diagram showing a two-layer disk fab- 
rication process (part 1) according to the present 
embodiment; 

Figure 7 is a diagram showing the two-layer disk 10 
fabrication process (part 2) according to the present 
embodiment; 

Figure 8(a) is an enlarged view of a non reflective 
portion of a laminated type according to the present 
embodiment, and (b) is an enlarged view of a non- *5 
reflective portion of a single-plate type according to 
the present embodiment; 

Figure 9(a) is a reproduced-waveform diagram for 
a nonref lective portion according to the present em- 
bodiment, (b) is a reproduced-waveform diagram 20 
for a nonreflective portion according to the present 
embodiment, and (c) is a reproduced-waveform di- 
agram for a nonreflective portion according to the 
present embodiment; 

Figure 1 0(a) is a cross-sectional view of a nonre- 25 
flective portion of the laminated type according to 
the present embodiment, and (b) is a cross-section- 
al view of a nonreflective portion of the single-plate 
type according to the present embodiment; 
Figure 11 is a schematic diagram, based on an ob- 30 
servation through a transmission electron micro- 
scope, illustrating a cross section of the nonreflec- 
tive portion according to the present embodiment; 
Figure 12(a) is a cross-sectional view of a disk ac- 
cording to the present embodiment, and (b) is a 35 
crosssectional view of the nonreflective portion of 
the disk according to the present embodiment; 
Figure 13(a) is a diagram showing a physical ar- 
rangement of addresses on a legitimate CD accord- 
ing to the embodiment, and (b) is a physical ar- *o 
rangement of addresses on an illegally duplicated 
CD according to the embodiment; 
Figure 1 4 is a block diagram for disk manufacturing 
according to the embodiment; 
Figure 1 5 is a block diagram of a low-reflectivity po- 45 
sition detector according to the embodiment; 
Figure 16 is a diagram illustrating the principle of 
detecting address/clock positions of a low-reflectiv- 
ity portion according to the embodiment; 
Figure 17 is a diagram showing a comparison of so 
low-reflectivity portion address tables for a legiti- 
mate disk and a duplicated disk; 
Figure 1 8 is a flowchart illustrating a disk check pro- 
cedure using a one-direction function according to 
the embodiment; 55 
Figure 1 9 is a diagram showing a comparison of ad- 
dress coordinate positions on different master disks 
according to the embodiment; 



Figure 20 is a flowchart illustrating a low-reflectivity 
position detecting program according to the embod- 
iment; 

Figure 21 is a block diagram of a magnetic record- 
ing apparatus according to the embodiment; 
Figure 22 is a flowchart illustrating a procedure for 
encryption, etc. using an RSA function according to 
the embodiment; 

Figure 23 is a flowchart illustrating a procedure for 
digital signature, etc. using an elliptic function ac- 
cording to the embodiment; 
Figure 24 is a flowchart illustrating a position infor- 
mation check process according to the embodi- 
ment; 

Figure 25 is a block diagram of an information 
processing apparatus according to the embodi- 
ment; 

Figure 26 is a top plan view of a second low-reflec- 
tivity portion according to the embodiment; 
Figure 27 is a diagram showing a detected wave- 
form of a first-layer marking signal according to the 
present embodiment; 

Figure 28 is a diagram showing a detected wave- 
form of a second-layer marking signal according to 
the present embodiment; 

Figure 29 is a block diagram of a disk manufacturing 
apparatus according to the present embodiment; 
Figure 30 is a code diagram for a nonreflective por- 
tion according to the present embodiment; 
Figure 31 is a diagram showing a detected wave- 
form from the nonreflective portion according to the 
present embodiment; 

Figure 32 is a diagram for explaining the contents 
of barcode recorded information and the relative re- 
lationship thereof according to the present embod- 
iment; 

Figure 33 is a perspective view showing the nonre- 
flective portion formed in the two-layer disk accord- 
ing to the present embodiment; 
Figure 34 is a diagram for explaining data flow in 
disk distribution according to the present embodi- 
ment; 

Figure 35 is a diagram showing a process of disk 
distribution according to the present embodiment; 
Figure 36 is a block diagram for explaining a man- 
ufacturing process when applying complex encryp- 
tion to position information, etc. by using a master 
key, subkey, etc. according to the present embodi- 
ment; 

Figure 37 is a block diagram for explaining the man- 
ufacturing process when applying complex encryp- 
tion to position information, etc. by using the master 
key, subkey, etc. according to the present embodi- 
ment; 

Figure 38 is a flowchart in a reproduction apparatus 
according to the present embodiment; 
Figure 39 is a diagram showing a secret key cipher 
and a public key cipher used in combination on op- 
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tical disks and their relationship with reproduction 
apparatus according to the present embodiment; 
Figure 40 is a block diagram showing an outline of 
a process of recording position information, etc., en- 
crypted with a master key, subkey, etc., on an opti- 
cal disk and a process of reproducing such informa- 
tion according to the present embodiment; 
Figure 41 is a block diagram of an optical disk re- 
production apparatus according to the present em- 
bodiment; and 

Figure 42 is a flowchart illustrating the function of a 
scramble identifier and the switching between drive 
ID and disk ID in a program installation process ac- 
cording to the present embodiment. 

BEST MODE FOR CARRYING OUT THE INVENTION 

[0036] The constitution and operation of a marking 
forming apparatus, a method of forming a laser marking 
to an optical disk, a reproduction apparatus, an optical 
disk, and a method of manufacturing an optical disk will 
be described below in accordance with an embodiment 
of the present invention. 

[0037] In the description of the present embodiment 
given herein, the first half part (1 ) deals with such oper- 
ations as manufacturing a disk, forming a marking by 
using a laser, reading position information of the mark- 
ing, performing encryption and other processing on the 
position information, etc. for writing on an optical disk, 
and reproducing the optical disk on a player. The en- 
cryption and reproduction operations are briefly de- 
scribed in the first part (1). 

[0038] Next, in the second half part (2), the encryption 
and other processing of the marking position informa- 
tion, etc. and the decryption and reproduction of the po- 
sition information, etc. on the optical disk, briefly de- 
scribed in the first part (1), will be described in further 
detail. 

The second part (2) also deals with various techniques 
for preventing piracy. 

[0039] In this patent specification, laser trimming is al- 
so referred to as laser marking, while a nonreflective op- 
tical marking portion is simply referred to as the marking 
or optical marking or, sometimes, as the physical ID 
unique to the disk. 

[0040] (1 ) Figure 1 is a flowchart illustrating a general 
process flow from disk manufacturing to the completion 
of an optical disk. 

[0041 ] First, the software company performs software 
authoring in software production process 820. The com- 
pleted software is delivered from the software company 
to the disk manufacturing factory. In disk manufacturing 
process 81 6 at the disk manufacturing factory, the com- 
pleted software is input in step 818a, a master disk is 
produced (step 818b), disks are pressed (steps 81 8e, 
81 8g), reflective films are formed on the respective disks 
(steps 81 8f, 81 8h), the two disks are laminated together 
(step 81 8i), and a ROM disk such as a DVD or CD is 



completed (step 818m, etc.). 
[0042] The thus completed disk 800 is delivered to the 
software maker or to a factory under control of the soft- 
ware maker, where, in secondary recording process 

s 81 7, an anti-piracy marking 584, such the one shown in 
Figure 2, is formed (step 819a), and accurate position 
information of this mark is read by a measuring means 
(step 819b) to obtain the position information which 
serves as the physical feature information of the disk. 

10 This physical feature information of the disk is encrypted 
in step 819c. The encrypted information is converted to 
a PWM-modulated signal which is then recorded in step 
81 9d as a barcode signal on the disk by using a laser. 
The disk physical feature information may be combined 

is together with software feature information for encryption 
in step 819c. 

[0043] The above processes will be described in fur- 
ther detail. That is, a disk fabrication process, a marking 
formation process, a marking position reading process, 
20 and an encrypted information writing process for an op- 
tical disk according to the present invention will be de- 
scribed in detail with reference to Figures 4 and 5 and 
Figures 8 to 12. A supplementary explanation will also 
be given dealing with a disk having two reflective layers 
25 with reference to Figures 6 and 7. In the following de- 
scription, the marking formation process and the mark- 
ing position reading process are collectively called the 
secondary recording process. 
[0044] (A) First, the disk fabrication process will be de- 
30 scribed. In the disk fabrication process 806 shown in 
Figure 4, first a transparent substrate 801 is pressed in 
step (1). In step (2), a metal such as aluminum or gold 
is sputtered to form a reflective layer 802. An adhesive 
layer 804 formed from an ultraviolet curing resin is ap- 
35 plied by spin coating to a substrate 803 formed in a dif- 
ferent processing step, and the substrate 803 is bonded 
to the transparent substrate 801 having the reflective 
layer 802, and they are rotated at high speed to make 
the bonding spacing uniform. By exposure to external 
40 ultraviolet radiation, the resin hardens, thus firmly bond- 
ing the two substrates together. In step (4), a printed 
layer 805 where a CD or DVD title is printed, is printed 
by screen printing or offset printing. Thus, in step (4), 
the ordinary laminated-type optical ROM disk is com- 
45 pieted. 

[0045] (B) Next, the marking formation process will be 
described with reference to Figures 4 and 5. In Figure 
4, a laser beam from a pulsed laser 81 3 such as a YAG 
laser is focused through a converging lens 81 4 onto the 
so reflective layer 802, to form a nonreflective portion 815 
as shown in step (6) in Figure 5. That is, a distinct wave- 
form, such as the waveform (A) shown in step (7), is 
reproduced from the nonreflective portion 815 formed 
in step (6) in Figure 5. By slicing this waveform, a mark- 
55 ing detection signal such as shown by waveform (B) is 
obtained, from which hierarchial marking position infor- 
mation comprising an address, such as shown in signal 
(d), and an address, a frame synchronizing signal 
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number, and a reproduced clock count, such as shown 
in signal (e), can be measured. 
[0046] As previously stated, a supplementary expla- 
nation will be given below of an alternative type of disk 
(a two-layer laminated disk) with reference to Figures 6 
and 7. 

[0047] Figures 4 and 5 showed a disk generally 
known as a single-layer laminated disk which has a re- 
flective layer only on one substrate 801 . On the other 
hand, Figures 6 and 7 show a disk generally known as 
a two-layer laminated disk which has reflective layers 
on both substrates 801 and 803. For laser trimming, the 
processing steps (5) and (6) are fundamentally the 
same for both types of disks, except with significant dif- 
ferences which are briefly described below. First, while 
the single-layer disk uses a reflective layer formed from 
an aluminum film having reflectivity as high as 70% or 
over, in the two-layer disk the reflective layer 801 formed 
on the reading-side substrate 801 is a semi-transparent 
gold (Au) film having a reflectivity of 30%, while the re- 
flective layer 802 formed on the print-side substrate 803 
is the same as that used in the single-layer disk. Second, 
as compared with the single-layer disk, the two-layer 
disk is required to have high optical accuracy; for exam- 
ple, the adhesive layer 804 must be optically transparent 
and be uniform in thickness, and the optical transparen- 
cy must not be lost due to laser trimming, Figures 7(7), 
7(8), and 7(9) show the waveform from the first layer of 
the two-recording-layer disk. The waveform from the 
second layer is similar to that from the first layer, though 
the signal level is lower than from the first layer. How- 
ever, since the first and second layers are bonded to- 
gether, relative positional accuracy between them is 
random and can be controlled only with an accuracy of 
a few hundred microns. As will be described later, since 
the laser beam passes through the two reflective films, 
to make an illegal disk the position informations on the 
first and second layers for the first mark, for example, 
have to be made to match the same value on the legit- 
imate disk. But making them match would require a 
near-submicron accuracy in laminating, and conse- 
quently, making illegal disks of the two-layer type is 
practically impossible. 

[0048] The technique for forming the nonreflective op- 
tical marking portion will be described in further detail in 
sections (a) to (d) below with reference to Figures 8 to 
12, etc., dealing with the laminated type in comparison 
with a single-plate type. Figures 8(a) and (b) are micro- 
graphs showing plan views of nonreflective optical 
marking portions, and Figure 10 is a simplified schemat- 
ic cross-sectional view of a nonreflective portion of the 
two-layer laminated disk. 

(a) Using a 5 u j/pulse YAG laser, a laser beam was 
applied to a 500-angstrom aluminum layer lying 0.6 
mm below the surface of a 1 .2-mm thick ROM disk 
consisting of two 0.6-mm thick disks laminated to- 
gether, and, as a result, a 12-um wide slit-like non- 



reflective portion 815 was formed, as shown in the 
X 750 micrograph of Figure 8(a). In this X 750 mi- 
crograph, no aluminum residues were observed on 
the nonreflective portion 815. Thick swollen alumi- 

5 num layers, 2000 angstroms thick and 2 urn wide, 
were observed along boundaries between the non- 
reflective portion 815 and reflective portions. As 
shown in Figure 10(a), it was confirmed that no sig- 
nificant damage had occurred inside. In this case, 

10 the application of the pulsed laser presumably melt- 
ed the aluminum reflective layer, causing a phe- 
nomenon of molten aluminum buildup along the 
boundaries on both sides due to the surface ten- 
sion. We call this a hot melt surface tension (HMST) 

15 recording method. This is a characteristic phenom- 
enon observed only on a laminated disk 800. Figure 
1 1 is a schematic diagram, based on an observation 
through a transmission electron microscope (TEM), 
illustrating a cross section of the nonreflective por- 

20 tion formed by the above laser trimming process. In 
the figure, if the aluminum film swollen portion is 1 .3 
pm wide and 0.20 jim thick, the amount of increased 
aluminum in that portion is 1 .3 x (0.20 - 0.05) = 0. 1 95 
urn 2 . The amount of aluminum originally deposited 

25 in a half portion (5 urn) of the laser exposed region 
(10 urn) was 5 x 0.05 = 0.250 urn 2 . The difference 
is calculated as 0. 250 - 0.1 95 = 0.055 |im 2 . In terms 
of length, this is equivalent to 0.055/0.05 = 1.1 urn. 
This means that an aluminum layer of 0.05pm thick- 

30 ness and 1.1pm length remained, and therefore, it 
can be safely said that almost all aluminum was 
drawn to the film swollen portion. Thus, the result 
of the analysis of the figure also verifies the expla- 
nation about the above-described characteristic 

35 phenomenon. 

(b) We will next deal with the case of a single-plate 
optical disk (an optical disk comprising a single 
disk). An experiment was conducted by applying la- 
ser pulses of the same power to a 0.05 urn thick 

fo aluminum reflective film formed on a single-sided 
molded disk, of which result is shown in Figure 8(b). 
As shown in the figure, aluminum residues were ob- 
served, and since these aluminum residues cause 
reproduction noise, it can be seen that the single- 

^5 plate type is not suitable for secondary recording of 
optical disk information of which a high density and 
a low error rate are demanded. Furthermore, unlike 
the laminated disk, in the case of the single-plate 
disk, the protective layer 862 is inevitably damaged, 

so as shown in Figure 10(b), when the nonreflective 
portion is subjected to laser trimming. The degree 
of damage depends on the laser power, but the 
damage cannot be avoided even if the laser power 
is controlled accurately. Moreover, according to our 

55 experiment, the printed layer 805 formed by screen 
printing to a thickness of a few hundred microns on 
the protective layer 862 was damaged when its 
thermal absorptance was high. In the case of the 
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single-plate disk, to address the problem of protec- 
tive layer damage, either the protective layer has to 
be applied once again or the laser cut operation 
should be performed before depositing the protec- 
tive layer. In any case, the single-plate type may 5 
present a problem in that the laser cut process has 
to be incorporated in the pressing process. 
This limits the application of the single-plate disk de- 
spite its usefulness. 

(c) A comparison between single-plate disk and 10 
laminated disk has been described above, using a 
two-layer laminated disk as an example. As is ap- 
parent from the above description, the same effect 

as obtained with the two-tayer laminated disk can 
be obtained with the single-layer laminated disk, is 
Using Figures 12(a), 12(b), etc., a further descrip- 
tion will be given dealing with the single-layer type. 
As shown in Figure 12(a), the reflective layer 802 
has the transparent substrate 801 of polycarbonate 
on one side, and the hardened adhesive layer 804 20 
and a substrate on the other side, the reflective lay- 
er 802 thus being hermetically sealed therebe- 
tween. In this condition, pulsed laser light is focused 
thereon for heating; in the case of our experiment, 
heat of 5 (iJ/pulse is applied to a circular spot of 1 0 25 
to 20 (im diameter on the reflective layer 802 for a 
short period of 70 ns. As a result, the temperature 
instantly rises to 600°C, the melting point, melting 
state is caused. By heat transfer, a small portion of 
the transparent substrate 801 near the spot is melt- 30 
ed, and also a portion of the adhesive layer 804 is 
melted. The molted aluminum in this state is caused 
by surface tension to build up along boundaries 
821a and 821b, with tension being applied to both 
sides, thus forming buildups 822a and 822b of hard- 35 
ened aluminum, as shown in Figure 12(b). The non- 
reflective portion 584 free from aluminum residues 
is thus formed. This shows that a clearly defined 
nonreflective portion 584 can be obtained by laser- 
trimming the laminated disk as shown in Figure 10 40 
(a). Exposure of the reflective layer to the outside 
environment due to a damaged protective layer, 
which was the case with the single-plate type, was 
not observed even when the laser power was in- 
creased more than 1 0 times the optimum value. Af- *s 
ter the laser trimming, the nonreflective layer 584 
has the structure shown in Figure 1 2(b) where it is 
sandwiched between the two transparent sub- 
strates 801 and sealed on both sides with the ad- 
hesive layer 804 against the outside environment, so 
thus producing the effect of protecting the structure 
from environmental effects. 

(d) Another benefit of laminating two disks together 
will be described next. When secondary recording 

is made in the form of a barcode, an illegal manu- ss 
facturer can expose the aluminum layer by remov- 
ing the protective layer in the case of a single-plate 
disk, as shown in Figure 10(b). This gives rise to a 



possibility that nonencrypted data may be tampered 
with by redepositing an aluminum layer over the 
barcode portion on a legitimate disk and then laser- 
trimming a different barcode. For example, if the ID 
number is recorded in plaintext or separately from 
main ciphertext, in the case of a single-plate disk it 
is possible to alter the ID number, enabling illegal 
use of the software by using a different password. 
However, if the secondary recording is made on the 
laminated disk as shown in Figure 1 0(a), it is difficult 
to separate the laminated disk into two sides. In ad- 
dition, when removing one side from the other, the 
aluminum reflective film is partially destroyed. 
When the anti-piracy marking is destroyed, the disk 
will be judged as being a pirated disk and will not 
run. Accordingly, when making illegal alterations to 
the laminated disk, the yield is low and thus illegal 
alterations are suppressed for economic reasons. 
Particularly, in the case of the two-layer laminated 
disk, since the polycarbonate material has temper- 
ature/humidity expansion coefficients, it is nearly 
impossible to laminate the two disks, once separat- 
ed, by aligning the anti-piracy markings on the first 
and second layers with an accuracy of a few mi- 
crons, and to mass produce disks. Thus, the two- 
layer type provides a greater effectiveness in piracy 
prevention. It was thus found that a clearly defined 
slit of a nonreflective portion 584 can be obtained 
by laser-trimming the laminated disk 800. 

[0049] The technique for forming the nonreflective op- 
tical marking portion has been described in (a) to (d) 
above. 

[0050] (C) Next, the process of reading the position of 
the thus formed marking will be described. 
[0051] Figure 1 5 is a block diagram showing a low re- 
flectivity light amount detector 586 for detecting the non- 
reflective optical marking portion, along with its adjacent 
circuitry, in an optical disk manufacturing process. Fig- 
ure 1 6 is a diagram illustrating the principle of detecting 
address/clock positions of the low reflectivity portion. 
For convenience of explanation, the following descrip- 
tion deals with the operating principle when a read op- 
eration is performed on a nonreflective portion formed 
on an optical disk constructed from a single disk. It wilt 
be recognized that the same operating principle also ap- 
plies to an optical disk constructed from two disks lam- 
inated together. 

[0052] As shown in Figure 1 5, the disk 800 is loaded 
into a marking reading apparatus equipped with a low 
reflectivity position detector 600 to read the marking, 
and in this case, since a signal waveform 823 due to the 
presence and absence of pits and a signal waveform 
824 due to the.presence of the nonreflective portion 584 
are significantly different in signal level, as shown in the 
waveform diagram of Figure 9(a), they can be clearly 
distinguished using a simple circuit. 
[0053] The start position and end position of the non- 



7 



13 



EP 0 741 382 B1 



14 



reflective portion 564 having the above waveform can 
be easily detected by the low reflectivity light amount 
detector 586 shown in the block diagram of Figure 15. 
Using the reproduced clock signal as the reference sig- 
nal, position information is obtained in a low reflectivity 5 
position information output section 596. 
[0054] As shown in Figure 15, a comparator 587 in 
the low reflectivity light amount detector 586 detects the 
low reflectivity light portion by detecting an analog light 
reproduced signal having a lower signal level than a light 
amount reference value 588. During the detection peri- 
od, a low reflectivity portion detection signal of the wave- 
form shown in Figure 1 6(5) is output. The addresses and 
clock positions of the start position and end position of 
this signal are measured. 

[0055] The reproduced light signal is waveshaped by 
a waveform shaping circuit 590 having an AGC 590a, 
for conversion into a digital signal. A clock regenerator 
38a regenerates a clock signal from the waveshaped 
signal. An EFM demodulator 592 in a demodulating sec- 
tion 591 demodulates the signal, and an ECC corrects 
errors and outputs a digital signal. The EFM-demodu- 
lated signal is also fed to a physical address output sec- 
tion 593 where an address of MSF, from Q bits of a sub- 
code in the case of a CD, is output from an address out- 
put section 594 and a synchronizing signal, such as a 
frame synchronizing signal, is output from a synchroniz- 
ing signal output section 595. From the clock regenera- 
tor 38a, a demodulated clock is output. 
[0056] In a low reflectivity portion address/clock sig- 
nal position signal output section 596, a low reflectivity 
portion start/end position detector 599 accurately meas- 
ures the start posistion and end position of the low re- 
flectivity portion 584 by using an (n-1) address output 
section 597 and an address signal as well as a clock 
counter 598 and a synchronizing clock signal or the de- 
modulated clock. This method will be described in detail 
by using the waveform diagrams shown in Figure 1 6. As 
shown in the cross-sectional view of the optical disk in 
Figure 16(1), the low reflectivity portion 584 of mark 
number 1 is formed partially. 

A reflection slope signal such as shown in Figure 16(3), 
is output, the signal level from the reflective portion be- 
ing lower than the light amount reference value 588. 
This is detected by the light level comparator 587, and 
a low reflectivity light detection signal, such as shown in 
Figure 16(5), is output from the low reflectivity light 
amount detector 586. As shown by a reproduced digital 
signal in Figure 16(4), no digital signal is output from the 
mark region since it does not have a reflective layer. 
[0057] Next, to obtain the start and end positions of 
the low reflectivity light detection signal, the demodulat- 
ed clock or synchronizing clock shown in Figure 16(6) 
is used along with address information. First, a refer- 
ence clock 605 at address n in Figure 1 6(7) is measured. 
When the address immediately preceding the address 
n is detected by the (n-1) address output section 597, it 
is found that the next sync 604 is a sync at address n. 



The number of clocks from the synch 604 to the refer- 
ence clock 605, which is the start position of the low re- 
flectivity light detection signal, is counted by the clock 
counter 598. This clock count is defined as a reference 
delay time TD which is measured by a reference delay 
time TD measuring section 608 for storage therein. 
[0058] The circuit delay time varies with reproduction 
apparatus used for reading, which means that the ref- 
erence delay time TD varies depending on the repro- 
duction apparatus used. Therefore, using the TD, a time 
delay corrector 607 applies time correction, and the re- 
sulting effect is that the start clock count for the low re- 
flectivity portion can be measured accurately if repro- 
duction apparatus of different designs are used for read- 
ing. Next, by finding the clock count and the start and 
end addresses for the optical mark No. 1 in the next 
track, clock m+14 at address n+12 is obtained, as 
shown in Figure 1 6(8). Since TD = m + 2, the clock count 
is corrected to 12, but for convenience of explanation, 
n+14 is used. We will describe another method, which 
eliminates the effects of varying delay times without hav- 
ing to obtain the reference delay time TD in the repro- 
duction apparatus used for reading. This method can 
check whether the disk is a legitimate disk or not by 
checking whether the positional relationship of mark 1 
at address n in Figure 1 6(8) relative to another mark 2 
matches or not. That is, TD is ignored as a variable, and 
the difference between the position, A1 = a1 + TD, of 
mark 1 measured and the position, A2 = a2 + TD, of 
mark 2 measured is obtained, which is given as A1 - A2 
= a1 - a2. At the same time, it is checked whether this 
difference matches the difference, a1 - a2, between the 
position a1 of the decrypted mark 1 and the position in- 
formation a2 of the mark 2, thereby judging whether the 
disk is a legitimate disk or not. The effect of this method 
is that the positions can be checked after compensating 
for variations of the reference delay time TD by using a 
simpler constitution. 

[0059] (D) Next, the encrypted information writing 
process will be described. The position information read 
in the process (C) is encrypted (digital signature), as will 
be described in detail in the next section (2), and is writ- 
ten on the optical disk using a barcode or other method. 
Figure 3 shows how this is done. In Figure 3(1), the re- 
flective layer is trimmed by a pulsed laser, and a bar- 
code-like trimming pattern, such as shown in Figure 3 
(2), is formed. At a reproduction apparatus (player), an 
envelope waveform some portions of which are missing 
as shown in Figure 3(3) is obtained. The missing por- 
tions generate a low level signal which is different from 
a signal generated from an ordinary pit, and this signal 
is sliced by a second slice level comparator to obtain a 
low reflectivity portion detection signal as shown in Fig- 
ure 3(4). From this low reflectivity portion detection sig- 
nal, a PWM demodulator 621 in Figure 3(5) demodu- 
lates the signal containing encrypted information. 
[0060] The processing steps in the optical disk man- 
ufacturing process have been described above. Next, 
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the constitution and operation of a reproduction appa- 
ratus (player) for reproducing the thus completed optical 
disk on a player will be described with reference to Fig- 
ure 41. 

[0061 ] In the figure, the construction of an optical disk 
9102 will be described first. A marking 9103 is formed 
on a reflective layer (not shown) deposited on the optical 
disk 9102. In the manufacturing process of the optical 
disk, the position of the marking 9103 was detected by 
position detecting means, and the detected position was 
encrypted as marking position information and written 
on the optical disk in the form of a barcode 91 04. 
[0062] Position information reading means 9101 
reads the barcode 9104, and decrypting means 9105 
contained therein decrypts the contents of the barcode 
for output. Marking reading means 9106 reads the ac- 
tual position of the marking 91 03 and outputs the result. 
Comparing/judging means 91 07 compares the decrypt- 
ed result from the decrypting means 9105 contained in 
the position information reading means 9101 with the 
result of reading by the marking reading means 9106, 
and judges whether the two agree within a predeter- 
mined allowable range. If they agree, a reproduction sig- 
nal 91 08 for reproducing the optical disk is output; if they 
do not agree, a reproduction stop signal 9109 is output. 
Control means (not shown) controls the reproduction 
operation of the optical disk in accordance with these 
signals; when the reproduction stop signal is output, an 
indication to the effect that the optical disk is an illegal 
duplicated disk is displayed on a display (not shown) 
and the reproduction operation is stopped. In the above 
operation, it will be recognized that it is also possible for 
the marking reading means 9106 to use the decrypted 
result from the decrypting means 91 05 when reading the 
actual position of the marking 9103. 
[0063] Thus the reproduction apparatus of the above 
construction can detect an illegally duplicated optical 
disk and stop the reproduction operation of the disk, and 
can prevent illegal duplicates practically. 
[0064] The foregoing description has dealt with the 
process from optical disk manufacturing to the repro- 
duction operation of the player, and we will now proceed 
to a description of appertaining matters relating to the 
details of the above process. 

[0065] (A) A low reflectivity portion address table, 
which is a position information list for the low reflectivity 
portion, will be explained. 

(a) Laser markings are formed at random in the anti- 
piracy mark formation process at the factory. No la- 
ser markings formed in this manner can be identical 
in physical feature. In the next process step, the low 
reflectivity portion 584 formed on each disk is meas- 
ured with a resolution of 0.13 urn in the case of a 
DVD, to construct a low reflectivity portion address 
table 609 as shown in Figure 13(a). Here, Figure 13 
(a) is a diagram showing a low reflectivity portion 
address table, etc. for a legitimate CD manufac- 



tured in accordance with the present embodiment, 
and Figure 13(b) is concerned with an illegally du- 
plicated CD. 

The low reflectivity portion address table 609 is en- 

5 crypted using a one-direction function such as the 
one shown in Figure 18, and in the second reflec- 
tive-layer forming step, a series of low reflectivity 
portions 584c to 584e, where the reflective layer is 
removed, is recorded in a barcode-like pattern on 

10 the innermost portion of the disk, as shown in Figure 
2. Alternatively, it may be recorded on a magnetic 
recording portion 67 of a CD-RDM, as shown in Fig- 
ure 14. Figure 18 is a flowchart illustrating a disk 
check procedure by the one-way function used for 

is the encryption, and Figure 14 is a block diagram of 
a disk making apparatus and a special recording/ 
reproduction apparatus. As shown in Figure 13, the 
legitimate CD and the illegally duplicated CD have 
the low reflectivity portion address tables 609 and 

20 609x, respectively, which are substantially different 
from each other. One factor resulting in this differ- 
ence is that laser markings identical in physical fea- 
ture cannot be made, as earlier noted. Another fac- 
tor is that the sector address preassigned to the disk 

25 is different if the master disk is different. 

Referring now to Figure 13, we will describe 
how the marking position information differs be- 
tween the legitimate disk and pirated disk. The fig- 
ure shows an example in which the above two fac- 

30 tors are combined. In the example shown, two 
markings are formed on one disk. In the case of the 
legitimate CD, the first marking of mark number 1 
is located at the 262nd clock position from the start 
point of the sector of logical address A1 , as shown 

35 in the address table 609. In the case of a DVD, one 
clock is equivalent to 0.13 urn, and the measure- 
ment is made with this accuracy. 
On the other hand, in the case of the pirated CD, 
the first marking is located at the 81 st clock position 

40 in the sector of address A2, as shown in the address 
table 609x. By detecting this difference of the first 
marking position between the legitimate disk and pi- 
rated disk, the pirated disk can be distinguished. 
Likewise, the position of the second marking is also 

45 different. To make the position information match 
that of the legitimate disk, the reflective film at the 
262nd position in the sector of address A1 must be 
formed with an accuracy of one clock unit, i.e., 0.1 3 
^im; otherwise, the pirated disk cannot be run. 

so Accordingly, as shown in Figure 14, in the re- 

production apparatus, the encrypted table is de- 
crypted to reconstruct the legitimate table which is 
then checked by a check program 535 to differenti- 
ate between the legitimate disk and illegally dupli- 

55 cated disk, and to stop the reproduction operation 
in the case of a duplicated disk. In the example of 
Figure 16, the legitimate disk and illegally duplicat- 
ed disk have low reflectivity portion address tables 
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609 and 609x respectively, where values are differ- 
ent as shown in Figure 17. In the case of the legiti- 
mate disk, in the track following the mark 1 the start 
and end positions are m+14 and m+267, respec- 
tively, as shown in Figure 1 6(8), whereas in the case 
of the illegally duplicated disk these are m+24 and 
m+277, respectively, as shown in Figure 16(9). 
Therefore, the corresponding values in the low re- 
flectivity portion address tables 609 and 609x are 
different, as shown in Figure 17, thus making it pos- 
sible to distinguish the duplicated disk. If an illegal 
manufacturer desires to make a copy of the disk 
having the low reflectivity portion address table 609, 
they will have to perform a precise laser trimming 
operation with the resolution of the reproduced 
clock signal as shown in Figure 16(8). In the case 
of a DVD disk, the period T of the reproduced clock 
pulse, when converted to a distance on the disk, is 
0.13 nm as shown in Figure 27(5). Accordingly, to 
make an illegal copy, the reflective film will have to 
be removed with a submicron resolution of 0.1 urn. 
It is true that when an optical head designed for an 
optical disk is used, a recording can be made on a 
recording film such as a CD-R with a submicron res- 
olution. But in this case, the reproduced waveform 
will be as shown in Figure 9(c), and the distinct 
waveform 824 as shown in Figure 9(a) cannot be 
obtained unless the reflective film is removed. 

(b) A first method of achieving mass production of 
pirated disks by removing the reflective film may be 
by laser trimming using a high output laser such as 
a YAG laser. At the present state of technology, 
even the most highly accurate machining laser trim- 
ming can only achieve a processing accuracy of a 
few microns. In the laser trimming for semiconduc- 
tor mask corrections, it is said that 1 \xm is the limit 
of the processing accuracy. This means that it is dif- 
ficult to achieve a processing accuracy of 0.1 |um at 
the mass production level. 

(c) As a second method, X-ray exposure equipment 
for processing semiconductor masks for VLSIs and 
ion beam processing equipment are known at the 
present time as equipment that can achieve a 
processing accuracy of the order of submicrons, but 
such equipment is very expensive and furthermore, 
it takes much time to process one piece of disk, and 
if each disk were processed using such equipment, 
the cost per disk would be very high. At the present 
time, therefore, the cost would become higher than 
the retail price of most legitimate disks, so that mak- 
ing pirated disks would not pay and meaningless. 

(d) As described above, with the first method that 
involves laser trimming, it is difficult to process with 
a submicron accuracy, and therefore, it is difficult to 
mass produce pirated disks. On the other hand, with 
the second method using the submicron processing 
technology such as X-ray exposure, the cost per 
disk is so high that making pirated disks is mean- 



ingless from an economic point of view. Accordingly, 
making illegal copies can be prevented until some 
day in the future when low-cost submicron process- 
ing technology for mass production becomes prac- 

5 tical. Since practical implementation of such tech- 
nology.will be many years into the future, production 
of pirated disks can be prevented. In the case of a 
two-layer disk with a low reflectivity portion formed 
on each layer as shown in Figure 33, an illegally 

10 duplicated disk cannot be manufactured unless the 
pits on top and bottom are aligned with good accu- 
racy when laminating, and this enhances the effec- 
tiveness in preventing piracy. 

15 [0066] (B) Next, we will describe how the arrange- 
ment angle of the low reflectivity portion on the disk can 
be specified. 

[0067] In the present invention, sufficient effective- 
ness in piracy prevention is provided by the reflective 
20 layer level mechanism, that is, by the low reflective 
marking alone. 

In this case, the prevention is effective even if the master 
disk is a duplicate. 

However, the effectiveness can be enhanced by com- 

25 bining it with the piracy prevention technique at the mas- 
ter disk level. If the arrangement angle of the low reflec- 
tivity portion on the disk is specified as shown in Table 
532a and Table 609 in Figure 13(a), an illegal manufac- 
turer would have to accurately duplicate even the ar- 

30 rangement angle of each pit on the master disk. This 
would increase the cost of pirated disks and hence en- 
hance the capability to deter piracy. 
[0068] (C) The points of the present invention will be 
summarized below. In the present invention, a legitimate 

35 manufacturer can make a. legitimate disk by processing 
the disk using a general-purpose laser trimming appa- 
ratus having a processing accuracy of several tens of 
microns. Though a measuring accuracy of 0.13 |um is 
required, this can be achieved by conventional circuitry 

40 contained in a consumer DVD player. By encrypting the 
measured result with a secret encryption key, a legiti- 
mate disk can be manufactured. That is, the legitimate 
manufacturer need only have a secret key and a meas- 
uring apparatus with a measuring accuracy of 0.13 urn, 

45 while the required processing accuracy is two or three 
orders of magnitude lower, that is, several tens of mi- 
crons. This means that a convectional laser processing 
apparatus can be used. On the other hand, an illegal 
manufacturer, who does not have a secret key, will have 

so to directly copy the encrypted information recorded on 
the legitimate disk. This means that a physical mark cor- 
responding to the encrypted position information, that 
is, the position information on the legitimate disk, must 
be formed with a processing accuracy of 0.13 (am. That 

55 is, the low reflective mark has to be formed using a 
processing apparatus having a processing accuracy 
two orders of magnitude higher than that of the process- 
ing apparatus used by the legitimate manufacturer. Vol- 
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ume production with an accuracy higher by two orders 
of magnitude, i.e., with an accuracy of 0.1 urn, is difficult 
both technically and economically, even in the foresee- 
able future. This means that production of pirated disks 
can be prevented during the life of the DVD standard. 
One point of the invention is to exploit the fact that the 
measuring accuracy is generally a few orders of magni- 
tude higher than the processing accuracy. 
[0069] In the case of CLV, the above method exploits 
the fact that the address coordinate arrangement differs 
from one master disk to another, as previously noted. 
Figure 19 shows the result of the measurement of ad- 
dress locations on actual CDs. Generally, there are two 
types of master disk, one recorded by rotating a motor 
at a constant rotational speed, i.e., with a constant an- 
gular velocity (CAV), and the other recorded by rotating 
a disk with a constant linear velocity (CLV). In the case 
of a CAV disk, since a logical address is located on a 
predetermined angular position on the disk, the logical 
address and its physical angular position on the disk are 
exactly the same no matter how many master disks are 
made. On the other hand, in the case of a CLV disk, 
since only the linear velocity is controlled, the angular 
position of the logical address on the master disk is ran- 
dom. As can be seen from the result of the measurement 
of logical address locations on actual CDs in Figure 19, 
the tracking pitch, start point, and linear velocity vary 
slightly from disk to disk even if exactly the same data 
is recorded using the same mastering apparatus, and 
these errors accumulate, resulting in different physical 
locations. In Figure 19, the locations of each logical ad- 
dress on a first master disk are indicated by white cir- 
cles, and the locations on second and third master disks 
are indicated by black circles and triangles, respectively. 
As can be seen, the physical locations of the logical ad- 
dresses vary each time the master disk is made. Figure 
1 7 shows the low reflectivity portion address tables for 
a legitimate disk and an illegally duplicated disk for com- 
parison. 

[0070] The method of piracy prevention at the master 
disk level has been described above. This is, when mas- 
ter disks of CLV recording, such as a CD or DVD, are 
made from the same logic data by using a mastering 
apparatus, as shown in Figure 1 9, the physical location 
of each pit on the disk varies between master disks, that 
is, between the legitimate disk and pirated disk. This 
method distinguishes a pirated disk from a legitimate 
disk by taking advantage of this characteristic. 
The piracy prevention technology at the master disk lev- 
el can prevent pirated disks at the logic level made by 
simply copying data only from the legitimate disk. How- 
ever, recent years have seen the emergence of pirate 
manufacturers equipped with more advanced technolo- 
gies, who can make a master disk replica identical in 
physical feature to a legitimate disk by melting the poly- 
carbonate substrate of the legitimate disk. In this case, 
the piracy prevention method at the master disk level is 
defeated. To prevent this new threat of pirated disk pro- 



duction, the present invention has devised the piracy 
prevention method at the reflective layer level wherein 
a marking is formed on a reflective film. 
[0071] According to the method of the present inven- 
5 tion, the marking is formed on each disk pressed from 
a master disk, even if disks are pressed from the master 
disk, by removing a portion of the reflective film in the 
reflective film formation process. As a result, the position 
and shape of the resulting low reflective marking is dif- 
10 ferent from one disk to another. In a usual process, it is 
next to impossible to partially remove the reflective film 
with an accuracy of submicrons. This serves to enhance 
the effectiveness in preventing duplication since dupli- 
cating the disk of the invention does not justify the cost. 
'5 [0072] Figure 20 shows a flowchart for detecting a du- 
plicated CD by using the low reflectivity portion address 
table. The delay time needed to detect the optical mark 
varies only slightly due to the optical head and circuit 
designs of the reproduction apparatus used. This of the 
20 delay time TD circuit can be predicted at the design 
stage or at the time of mass production. The optical mark 
position information is obtained by measuring the 
number of clocks, that is, the time, from the frame syn- 
chronizing signal. Due to the effect of the circuit delay 
25 time, an error may be caused to detected data of the 
optical mark position information. As a result, a legiti- 
mate disk may be erroneously judged as being a pirated 
disk, inconveniencing a legitimate user. A measure to 
reduce the effect of the circuit delay time TD will be de- 
30 scribed below. Further, a scratch made on a disk after 
purchase may cause an interruption in the reproduced 
clock signal, causing an error of a few clocks in the 
measurement of the optical mark position information. 
To address this problem, a tolerance 866 and a pass 
35 count 867, shown in Figure 27, are recorded on a disk, 
and while allowing a certain degree of tolerance on the 
measured value according to the actual situation at the 
time of reproduction, the reproduction operation is per- 
mitted when the pass count 867 is reached; the margin 
40 allowed for an error due to a surface scratch on the disk 
can be controlled by the copyright owner prior to the 
shipment of the disk. This will be described with refer- 
ence to Figure 20. 

[0073] In Figure 20, the disk is reproduced in step 
45 865a to recover the encrypted position information from 
the barcode recording portion or pit recording portion of 
the present invention. In step 865b, decryption or signa- 
ture verification is performed, and in step 865c, a list of 
optical mark position information is recovered. Next, if 
so the delay time TD of a reproduction circuit is stored in 
the circuit delay time storing section 608a in the repro- 
duction apparatus of Figure 15, TD is read out in step 
865h and the process proceeds to step 865x. If TD is 
not stored in the reproduction apparatus, or if a meas- 
55 urement instruction is recorded on the disk, the process 
proceeds to step 865d to enter a reference delay time 
measurement routine. When address Ns-1 is detected, 
the start position of the next address Ns is found. The 
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frame synchronizing signal and the reproduced clock 
are counted, and in step 865f , the reference optical mark 
is detected. In step 865g, the circuit delay time TD is 
measured and stored. This operation is the same as the 
operation to be described later with reference to Figure 5 
1 6(7). In step 865x, the optical mark located inside ad- 
dress Nm is measured. In steps 865i, 865j, 865k, and 
865m, the optical mark position information is detected 
with a resolution of one clock unit, as in steps 865d, 
865y, 865f, and 865y. Next, in step 865n, a pirated disk 
detection routine is entered. First, the circuit delay time 
TD is corrected. In step 865p, the tolerance 866, i.e., tA, 
and pass count 867 recorded on the disk, as shown in 
Figure 27, are read to check whether or not the position 
information measured in step 865g falls within the toler- 
ance tA. If the result is OK in step 865r, then in step 865s 
it is checked whether the checked mark count has 
reached the pass count. If the result is OK, then in step 
865u the disk is judged as being a legitimate disk and 
reproduction is permitted. If the pass count is not 
reached yet, the process returns to step 865z. If the re- 
sult is NO in step 865r, then it is checked in step 865f 
whether the error detection count is smaller than NA, 
and only when the result is OK, the process returns to 
step 865s. If it is not OK, then in step 865v the disk is 
judged as being an illegal disk and the operation is 
stopped. 

[0074] As described, since the circuit delay time TD 
of the reproduction apparatus is stored in the IC ROM, 
optical mark position information can be obtained with 
increased accuracy. Furthermore, by setting the toler- 
ance 866 and pass count for the software on each disk, 
the criteria for pirated disk detection can be changed ac- 
cording to the actual condition to allow for a scratch 
made on the disk after purchase. This has the effect of 
reducing the probability of a legitimate disk being erro- 
neously judged as an illegal disk. 
[0075] (D) A further description will be given of the op- 
eration of reading the nonreflective optical marking por- 
tion of the two-disk laminated optical disk, focusing on 
points that were not touched on in the foregoing descrip- 
tion of the operating principle. 
[0076] That is, as shown in Figure 16, the start posi- 
tion address number, frame number, and clock number 
can be measured accurately with a resolution of 1 T unit, 
that is, with a resolution of 0.13 nm in the case of the 
DVD standard, by using a conventional player, thereby 
to accurately measure the optical mark of the present 
invention. Figures 27 and 28 show the optical mark ad- 
dress reading method of Figure 16 as applied to the 
DVD standard. Explanation of signals (1), (2), (3), (4), 
and (5) in Figures 27 and 28 will not be given here since 
the operating principle is the same as that shown in Fig- 
ure 16. 

[0077] The correspondence between Figure 16, 
.which illustrates the principle of the detection operation 
for detecting the position of a low reflectivity portion on 
a CD, and Figures 27 and 28, which are concerned with 



a DVD, is given below. 

[0078] Figure 1 6(5) corresponds to Figures 27(1 ) and 
28(1). The reproduced clock signal in Figure 16(6) cor- 
responds to that shown in Figures 27(5) and 28(5). Ad- 
dress 603 in Figure 16(7) corresponds to that shown in 
Figures 27(2) and 28(2). 

[0079] Frame synch 604 in Figure 1 6(7) corresponds 
to that shown in Figures 27(4) and 28(4). Starting clock 
number 605a in Figure 1 6(8) corresponds to reproduced 
channel clock number in Figure 27(6). Instead of the end 
clock number 606 in Figure 16(7), in Figures 27(7) and 
28(7) data is compressed using a 6-bit marking length. 
[0080] As illustrated, the detection operation is funda- 
mentally the same between CD and DVD. A first differ- 
ence is that a 1-bit mark layer identifier 603a as shown 
in Figure 27(7) is included for identifying whether the 
low reflectivity portion is of the one-layer type or two- 
layer type. The two-layer DVD istructure provides a 
greater anti -pi racy. effect, as previously described. A 
second difference is that since the line recording density 
is nearly two times as high, 1 T of the reproduced clock 
is as short as 0.13 \im t which increases the resolution 
for the detection of the position information and thus pro- 
vides a greater anti-piracy effect. 
[0081] Shown in Figure 27 is the signal from the first 
layer in a two-layer optical disk having two reflective lay- 
ers. The signal (1 ) shows the condition when the start 
position of an optical mark on the first layer is detected. 
Figure 28 shows the condition of the signal from the sec- 
ond layer. 

[0082] To read the second layer, a first/second layer 
switching section 827 in Figure 1 5 sends a switching sig- 
nal to a focus control section 828 which then controls a 
focus driving section 829 to switch the focus from the 
first layer to the second layer. From Figure 27, it is found 
that the mark is in address (n), and by counting the frame 
synchronizing signal (4) using a counter, it is found that 
the mark is in frame 4. From signal (5), the PLL repro- 
duced clock number is found, and the optical marking 
position data as shown by the signal (6) is obtained. Us- 
ing this position data, the optical mark can be measured 
with a resolution of 0. 1 3 nm on a conventional consumer 
DVD player. 

[0083] (E) Additional matters relating to the two-disk 
laminated optical disk will be further described below. 
[0084] . Figure 28 shows address position information 
pertaining to the optical marking formed on the second 
layer. Since laser light penetrates the first and second 
layers through the same hole, as shown in the process 
step (b)(sic) in Figure 7, the nonreflective portion 815 
formed on the first reflective layer 802 and the nonre- 
flective portion 826 formed on the second reflective lay- 
er 825 are identical in shape. This is depicted in the per- 
spective view of Figure 33. In the present invention, after 
the transparent substrate 801 and the second substrate 
803 are laminated together, laser light is applied pene- 
trating through to the second layer to form an identical 
mark thereon. In this case, since coordinate arrange- 
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ments of pits are different between the first and second 
layers, and since the positional relationship between the 
first and second layers is random when laminating them 
together, the pit positions where the mark is formed are 
different between the first and second layers, and en- 
tirely different position information is obtained from each 
layer. These two kinds of position information are en- 
crypted to produce an anti-piracy disk. If it is attempted 
to duplicate this disk illegally, the optical marks on the 
two layers would have to be aligned with a resolution of 
about 0.13 urn. As previously described, at the present 
state of technology it is not possible to duplicate the disk 
by aligning the optical marks with the pits with an accu- 
racy of 0.1 3 urn, that is, with an accuracy of the order of 
0.1 urn, but there is a possibility that mass production 
technology may be commercially implemented in the fu- 
ture that enables large quantities of single-layer disks 
to be trimmed with a processing accuracy of 0.1 urn at 
low cost. Even in that case, since the top and bottom 
disks are trimmed simultaneously in the case of the two- 
layer laminated disk 800, the two disks must be laminat- 
ed together with the pit locations and optical marks 
aligned with an accuracy of a few microns. However, it 
is next to impossible to laminate the disks with this ac- 
curacy because of the temperature coefficient, etc. of 
the polycarbonate substrate. When optical marks were 
formed by applying laser light penetrating through the 
two-layer disk 800, the resulting anti-piracy mark is ex- 
tremely difficult to duplicate. This provides a greater an- 
ti-piracy effect. The optical disk with an anti-piracy 
mechanism is thus completed. For piracy prevention ap- 
plications, in cases where the disk process and laser cut 
process are inseparable as in the case of the single- 
plate type, the encryption process, which is an integral 
part of the laser cut process, and processing involving 
a secret encryption key have to be performed at the disk 
manufacturing factory. This means that in the case of 
the single-plate type the secret encryption key main- 
tained in the software company have to be delivered to 
the disk manufacturing factory. This greatly reduces the 
security of encryption. On the other hand, according to 
the method involving laser processing of laminated 
disks, which constitutes one aspect of the invention, the 
laser trimming process can be completely separated 
from the disk manufacturing process. Therefore, laser 
trimming and encryption operations can be performed 
at a factory of the software maker. Since the secret en- 
cryption key that the software maker keeps need not be 
delivered to the disk manufacturing factory, the secret 
key for encryption can be kept in the safe custody of the 
software maker. This greatly increases the security of 
encryption. 

[0085] (2) (A) Encryption (digital signature) of marking 
position information, etc. and decryption and reproduc- 
tion of optical disk position information, etc., which have 
been briefly described in (1), will now be described in 
more detail. (B) Various mechanism for piracy preven- 
tion will also be described below. 



[0086] (A) Encryption (digital signature) and its repro- 
duction will be described. 

(a) Simple encryption (digital signature) 

(Implementation by RSA function) 

[0087] First, an example of encryption in which en- 
cryption is performed using a function of a message re- 
covery type signature method, such as an RSA function, 
will be described with reference to the flowcharts shown 
in Figures 22 and 24. 

[0088] As shown in Figure 22, the process consists of 
the following major routines: step 735a where marking 
position information is measured at the optical disk mak- 
er, step 695 where the position information is encrypted 
(or a digital signature is appended), step 698 where the 
position information is decrypted (or the signature is ver- 
ified or authenticated) in the reproduction apparatus, 
and step 735w where a check is made to determine 
whether the disk is a legitimate optical disk or not. 
[0089] First, in step 735a, the marking position infor- 
mation on the optical disk is measured in step 735b. The 
position information is then compressed in step 735d, 
and the compressed position information H is obtained 
in step 735e. 

[0090] In step 695, the ciphertext of the compressed 
position information H is constructed, First, in step 695, 
a secret key, d, of 512 or 1024 bits, and secret keys, p 
and q, of 256 or 512 bits, are set, and in step 695b, en- 
cryption is performed using an RSA function. When the 
position information H is denoted by M, M is raised to d- 
th power and mod n is calculated to yield ciphertext C. 
In step 695d, the ciphertext C is recorded on the optical 
disk. The optical disk is thus completed and is shipped 
(step 735k). 

[0091] In the reproduction apparatus, the optical disk 
is loaded in step 735m, and the ciphertext C is decrypted 
in step 698. More specifically, the ciphertext C is recov- 
ered in step 698e, and public keys, e and n, are set in 
step 698f; then in step b, to decrypt the ciphertext C, the 
ciphertext C is raised to e-th power and the mod n of the 
result is calculated to obtain plaintext M. The plaintext 
M is the compressed position information H. An error 
check may be performed in step 698g. If no errors, it is 
decided that no alterations have been made to the po- 
sition information, and the process proceeds to the disk 
check routine 735w shown in Figure 24. If an error is 
detected, it is decided that the data is not legitimate one, 
and the operation is stopped. 
[0092] In the next step 736a, the compressed position 
information H is expanded to recover the original posi- 
tion information. In step 736c, measurements are made 
to check whether the marking is actually located in the 
position on the optical disk indicated by the position in- 
formation. In step 736d, it is checked whether the differ- 
ence between the decrypted position information and 
the actually measured position information falls within a 
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tolerance. If the check is OK in step 736e, the process 
proceeds to step 736h to output software or data or ex- 
ecute programs stored on the optical disk. If the check 
result is outside the tolerance, that is, if the two pieces 
of position information do not agree, a display is pro- 5 
duced to the effect that the optical disk is an illegally 
duplicated one, and the operation is stopped in step 
736g. RSA has the effect of reducing required capacity 
since only the ciphertext need be recorded. 

(Implementation by elliptic function) 

[0093] Next, another type of signature system, that is, 
an imprint type signature system using an elliptic func- 
tion for encryption, will be described with reference to 
the flowcharts shown in Figures 23 and 24. 
[0094] As shown in Figure 23, etc:, the process con- 
sists of the following major routines: step 735a where 
marking position information is measured at the optical 
disk maker, step 735f where authentication ciphertext (i. 
e., signature) for the position information is computed, 
step 735n where position 'information authentication 
(signature verification) is performed in the reproduction 
apparatus, and step 735w where a check is made to de- 
termine whether the disk is a legitimate optical disk or 
not. 

[0095] The process from step 735a to step 735e is the 
same as that for the RSA function. 
[0096] In step 735f, authentication ciphertext for the 
compressed position information H is constructed. First, 
in step 735g, secret keys X (1 28 bits or over) and K are 
set, and in step 735h, a public system parameter G, a 
point on an ellipse, is determined, and with f(x) as a one- 
direction function, R = f(K x G) is obtained first, and then 
R' = f(R) is obtained; then from equation S = (K x R' - H) 
X -1 mod Q, R and S as authentication ciphertext are gen- 
erated. In step 735j, the authentication ciphertext R and 
S and the plaintext H of the compressed position infor- 
mation are recorded on the optical disk, and in step 
735k, the completed disk is shipped. 
[0097] In the reproduction apparatus, the optical disk 
is loaded in step 735m, and an authentication operation 
is performed in step 735n to authenticate the position 
information. 

[0098] First, in step 735p, the authentication cipher- 
text R and S and the compressed position information 
H are recovered from the loaded optical disk. In step 
735r, public keys Y, G, and Q are set, and in step 735s, 
an authentication operation is performed whereby f(A x 
Y + B x G) is obtained from A = SR _1 mod Q and B = 
HR" 1 mod Q. In step 735t, it is checked if the above value 
matches R. If they match, it is decided that no alterations 
have been made to the position information, and the 
process proceeds to the optical disk check routine 735w 
in Figure 24. If they do not match, it is decided that the 
data is not legitimate one, and the operation is stopped. 
[0099] The subsequent process from step 736a to 
step 736g is the same as that for the RSA function. That 



is, if the optical disk is judged as being an illegally du- 
plicated one, a display to that effect is produced, and in 
step 736g, the operation is stopped. Compared to the 
RSA function, the elliptic function has the advantage 
that the computation time is short, which serves to re- 
duce the time before the reproduction starts. This sys- 
tem therefore is suitable for application to consumer re- 
production apparatus. 

[0100] (b) Complex encryption (digital signature) us- 
ing master key, sub key, etc. 

[0101] Not only the marking position information but 
information concerning the features of contents of the 
software stored on the optical disk and an anti-piracy 
identifier are subjected to encryption (digital signature). 
Furthermore, two kinds of encryption keys, master key 
and subkey, are used. A specific example is described 
below in which a secret key encryption function is used 
in combination with a public key encryption function. 
[0102] Before proceeding to a detailed description of 
the specific example, a basic functional description of 
this system will be given first with reference to Figure 40 
to facilitate understanding of the basics thereof. 
[0103] In the example treated in the following basic 
description, encryption is performed using a public key 
encryption function, and encryption using a secret key 
encryption function is not treated here. Therefore, the 
master secret key for public key encryption and the sub 
secret key for public key encryption are simply referred 
to as the master secret key and sub secret key, respec- 
tively. Likewise, the master public key for public key en- 
cryption and the sub public key for public key encryption 
are simply referred to as the master public key and sub 
public key, respectively. 

[0104] As shown in Figure 40, a key management 
center 9001 securely manages the master secret key to 
maintain its secrecy, and is linked to a software maker 

9002, to be described later, via a communication line 

9003. When a request for encryption is made from the 
software maker 9002, the key management center 9001 
receives data, to be encrypted, via a network 9003 and 
encrypts the data using the master secret key. 
[0105] For simplicity of explanation, it is assumed 
here that the software maker 9002 also includes a disk 
manufacturing factory. Therefore, the software maker 
9002 here is a department that performs the manufac- 
turing process at the disk manufacturing factory illustrat- 
ed in Figure 1 , in addition to the production of software. 
That is, when manufacturing optical disks of movie soft- 
ware, encryption for prevention of illegal duplications is 
also performed. 

To accomplish the encryption, the software maker 9002 
obtains an exclusive sub secret key from the key man- 
agement center 9001 . The above has described the ar- 
rangement at the optical disk maker side. 
[0106] On the other hand, there is a player 9004 at 
the user side where the optical disk is used. The player 
9004 is an apparatus for reproducing an optical disk, 
and contains a ROM in which is prestored a master pub- 
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lie key corresponding to the master secret key main- 
tained at the key management center. A function to stop 
the reproduction of an illegally duplicated optical disk is 
also incorporated. 

[0107] Having described the general arrangement, 
we will now describe the operation. 

(b-1) First, the processing steps for encryption per- 
formed at the software maker 9002 will be de- 
scribed. 

The encryption step first performed (the first en- 
cryption step) involves encryption at the stage of 
disk mold manufacturing, and the encrypted infor- 
mation is reflected in the shape of the disk mold. 
The encryption step performed finally (the second 
encryption step) concerns encryption performed at 
a stage after the formation of a marking by laser 
trimming. 

(1-1) In the first encryption step, encryption is 
performed using a sub public key correspond- 
ing to the sub secret key to be used in the sec- 
ond encryption step, and using a software fea- 
ture information and anti-piracy identifier. The 
information is transferred to the key manage- 
ment center 9001 via the communication line 
9003. The software feature information refers 
to the information describing the contents of the 
movie software written on the optical disk, and 
it is unique to each movie software and is dif- 
ferent from one software to another. The anti- 
piracy identifier is provided to make it possible 
to detect whether the manufactured optical disk 
is processed with piracy prevention. The iden- 
tifier of an optical disk processed with piracy 
prevention using second ciphertext is "1"; oth- 
erwise, the identifier is "0". In this example, the 
identifier is "1", needless to say. 
(1-2) The key management center 9001 en- 
crypts the information transferred from the soft- 
ware maker 9002, by using the master secret 
key maintained at the center, and sends the en- 
crypted information back to the software maker 
9002. The thus created ciphertext is referred to 
as the first ciphertext. 

(1 -3) The software maker 9002 records the first 
ciphertext on the disk mold (or master) along 
with the movie software, etc. 
(1-4) The software maker 9002 molds disks by 
using the thus completed mold. 
(1-5) Next, the software maker 9002 fabricates 
optical disks from the molded disks, and per- 
forms the laser trimming, as previously de- 
scribed, to form a marking on each optical disk. 
(1-6) Further, the software maker 9002 detects 
the position of the marking and encrypts the ob- 
tained position information by using the sub se- 
cret key maintained at the maker. The thus en- 



crypted information is referred to as the second 
ciphertext. Since it is created by encrypting the 
position information, the second ciphertext is 
different from one optical disk to another even 
5 if they are pressed from the same mold. This is 

the difference from the first ciphertext. 
(1-7) Finally, the software maker 9002 records 
the second ciphertext as a barcode on the op- 
tical disk. The optical disk is thus completed. 

w 

(b-2) Next, we will describe the operation when the 
user who purchased the thus completed optical disk 
plays it back on the player 9004. 

15 (2-1) First, the player 9004 reads the first ci- 

phertext recorded on the optical disk, and using 
the master public key stored in the ROM, de- 
crypts the first ciphertext which contains in en- 
crypted form the sub public key corresponding 

20 to the sub secret key, the software feature in- 

formation, and the anti-piracy identifier. 
(2-2) In the meantime, the player 9004 extract- 
ed the software feature information from the 
contents of the movie software recorded on the 

25 optical disk. The extracted software feature in- 

formation is compared with the software feature 
information obtained by decryption in (2-1); if 
they do not agree, the optical disk is judged as 
being an illegally duplicated one, and the sub- 

30 sequent reproduction operation is stopped. If 

they agree, the process proceeds to the next 
step. 

(2-3) It is checked whether the anti-piracy iden- 
tifier obtained by decryption in (2-1 ) is T or "0". 
35 if it is "0", the reproduction operation is imme- 

diately started, skipping the process hereinaf- 
ter described. If it is "1 °, the process further con- 
tinues. 

In this manner, if the optical disk happens 

<o to be a disk not processed with the piracy pre- 

vention using the second ciphertext, the disk 
can be reproduced on the player 9004 as long 
as its identifier is set to "O" in a legitimate way. 
If a pirate attempts to make an illegal copy by 

45 altering the identifier to "0", his effort will be 

thwarted because the identifier is encrypted us- 
ing the master secret key after being combined 
with the software feature information, etc., as 
earlier described. 

so (2-4) First, the second ciphertext recorded on 

. the optical disk is read out. Then, the second 
ciphertext, which is the encrypted version of the 
position information, is decrypted using the sub 
public key obtained by decryption in (2-1 ). 

55 (2-5) Using the decrypted position information, 

it is checked whether the marking is actually 
formed in the position on the optical disk indi- 
cated by the position information. Then, the ac- 
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tually measured marking position information is 
compared with the position information de- 
crypted in (2-4). If they do not agree, the optical 
disk is judged as being an illegally duplicated 
one, and the reproduction operation is stopped. 5 
If they agree, the optical disk is judged as being 
a legitimate one, and the reproduction opera- 
tion is started. 

[0108] An outline of the system has been described 
above. Now, a description will be given in more specific 
form. 

[0109] As shown in Figure 32, software feature ex- 
tracting means 864 extracts the software parameters 
unique to the software, such as the TOC information 
showing the time organization of each chapter of the vid- 
eo software, image compression parameters, the title 
name, etc. from the contents of the software, and com- 
presses the extracted information to 1 28 bits to 256 bits 
by the computation of a checksum, the computation of 
a Galois field, etc., and a one-direction hash function 
864a such as SHA and MD5, to create software feature 
information 863. The software feature information 863 
is then combined with a sub public key 861 special to 
the software maker and an anti-piracy identifier 865 as 
a copyright identifier, into one data block which is then 
encrypted in steps 866a and 866b using a master secret 
key for public key encryption and is recorded on a mas- 
ter disk 867 in step 866e, along with the software proper. 
[0110] When a system is employed that uses secret 
key encryption in combination with public key encryp- 
tion, a master secret key for secret key encryption is 
used in step 866c, encryption is performed in step 866d, 
and the data is recorded on the master disk 867 in step 
866e. 

[01 1 1 ] The disk mastering process is thus completed. 
The anti-piracy identifier 865 recorded on the master 
disk defines how the copyright of the software should 
be protected, and consists of at least four bits of copy- 
right protection flags, including a flag of one bit to indi- 
cate whether the software is equipped with an anti-pira- 
cy mechanism, a flag of one bit to indicate whether it 
contains a low reflectivity barcode portion, a flag of one 
bit as a scramble identifier 965a to indicate whether the 
software is scrambled or not, and a flag of one bit to 
indicate whether software dubbing is prevented or not. 
Since the anti-piracy identifier 865 and the sub public 
key 861 are combined with the software feature infor- 
mation 863 unique to the software and are encrypted 
together by using the master secret key for public key 
encryption, it is not possible to alter them. 
[01 1 2] The anti-piracy identifier 865 and the sub pub- 
lic key 861 are combined with the software feature in- 
formation unique to the software, into one data block 
which is then encrypted by the secret key. 
[01 1 3] If the software feature information 863 consists 
of 256 bits, there are 2256 possible variations. This 
means that when software feature information is extract- 



ed from data obtained by authoring a particular movie 
software product, the probability that it coincides with 
software feature information of some other software is 
1/2256; therefore, the probability of such coincidence 
occurring is almost zero. 

When a one-direction hash function, such as MD5 or 
SHA, is used, if the hash value, i.e., the software feature 
information 963, consists of 256 bits, finding two soft- 
ware contents having the same hash value will require 
1 01 8 years of computing time using a currently available 
large computer. 

Consequently, it is nearly impossible to replace soft- 
ware. For the software feature information of a particular 
software product authored, only one value exists, and 
no other software can have the same value. 
[0114] Since the software feature information is en- 
crypted jointly with the anti-piracy identifier 865 and the 
sub public key 861 , neither of these two values cannot 
be altered. Thus, after authoring, the anti-piracy identi- 
fier 865 and the sub public key 861 for a particular soft- 
ware product are uniquely identified. 
[0115] The recording of the anti-piracy identifier 865 
on the master disk will be described in further detail. 
[0116] How the anti-piracy identifier 865 is actually 
appended to software is at the discretion of the copyright 
owner of the software. It takes cost and labor to apply 
an anti-piracy measure to optical disk software. Accord- 
ingly, not all optical disks are equipped with an anti-pi- 
racy mechanism; some optical disks incorporate an anti- 
piracy mechanism or the barcode of the present inven- 
tion, while others do not. If legitimate disks having no 
anti-piracy mechanism or barcode are allowed to exist, 
reproduction apparatus are required to have a function 
that enables both types of disk to be reproduced prop- 
erly. In that case, when reproducing a disk having no 
piracy protection, two possibilities must be considered: 
one is that the disk is a legitimate disk for which the soft- 
ware company has unlocked the piracy protection in a 
legitimate way, and the other is that the disk is a disk 
which the software company has produced with piracy 
protection but whose anti-piracy identifier has been ille- 
gally altered by a pirate. 

[0117] Means for identifying whether the anti-piracy 
identifier is legitimate or not is therefore important. 
[01 18] In the present invention, the anti-piracy identi- 
fier 865, including the anti-piracy identifier, is encrypted 
together with the software feature information by using 
a secret key, and recorded in a ciphertext recording sec- 
tion on the master disk. The reproduction apparatus de- 
crypts the ciphertext with a prescribed public key. This 
prevents illegal alterations from being made to either da- 
ta.. 

[0119] The only way left to pirates is to replace the 
whole portion of the first ciphertext, which contains the 
software feature information 863 and the anti-piracy 
identifier 865, by different one. 
[01 20] To distinguish the software feature information 
863 from the software feature information extracted 
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from the movie software actually written on the optical 
disk, which will be described later, the former may some- 
times be referred to as the first software feature infor- 
mation, and the latter as the second software feature 
information. Both kinds of information are the same in 
that they relate to the contents of the same movie soft- 
ware, but different in that the former is written in encrypt- 
ed form at the time the optical disk is manufactured, 
while the latter is extracted by examining the contents 
of the actually recorded movie software at the time of 
reproduction. 

[0121] Since the first software information 863 has a 
value unique to the software for which the authoring is 
completed, the probability of some other software yield- 
ing the same value is 1/2256, which is approximately 
zero, as earlier noted. If the first software information 
863 is replaced, the information no longer agrees with 
the second software feature information 885 actually ex- 
tracted from the disk in step 876e in the process of the 
check routine of Figure 38 performed in steps 876a, 
876c, 876e, and 876f . This prevents the disk with altered 
information from being played back. In this way, the anti- 
piracy identifier 865 of the software and the sub public 
key hereinafter described are protected against illegal 
alterations. An illegal manufacturer, who is thinking of 
making illegal disks by copying the software from a le- 
gitimate disk, may therefore consider making disks that 
do not have either the anti-piracy identifier or the bar- 
code. In that case, the anti-piracy identifier in the anti- 
piracy identifier 865 would have to be changed from ON 
("1 °) to OFF ( n 0 B ) setting. To change the setting, howev- 
er, it is necessary to have the key management center 
issue the first ciphertext encrypted with the master se- 
cret key shown at step 866a in Figure 36, but normally, 
measures are in effect to prevent the key management 
center from issuing it to an unauthorized person, thus 
preventing illegal alteration of the anti-piracy identifier 
865. 

[0122] That is, the first software feature information 
863 and the anti-piracy identifier 865 are encrypted to- 
gether into the first ciphertext 886 for recording on the 
master disk. 

This has the effect of thwarting any attempt by a pirate 
to make illegal copies of piracy-protected software in the 
disk format of no piracy prevention without an anti-piracy 
mark or mechanism. With this method that constitutes 
one aspect of the invention, if a disk standard is worked 
out, allowing the existence of disks without piracy pro- 
tection along with disks with piracy protection, and if the 
standard is replaced by a new-generation standard, re- 
production apparatus of the new generation can achieve 
piracy prevention against all disks. This is a big practical 
advantage. Furthermore, in the above embodiment, as 
examples of the copyright protection flag (identifier), ex- 
amples have been described wherein the anti-piracy 
identifier 865, etc. which indicates whether software 
contents are piracy-prevented software or not, is used. 
Besides the above embodiment, by using an anti-copy- 



ing identifier which indicates whether software contents 
are copying-prevented software or not, the disk having 
the copying-prevented software is protected from being 
sold on the condition of the cancelling the anti-copying 
s identifier. 

[01 23] The necessity of the master secret key and sub 
secret key in secret key of a public key encryption and 
the construction and functions of these secret keys will 
be described in detail below. 

[0124] In the piracy prevention method of the inven- 
tion, the secret encryption key need not be delivered to 
the disk manufacturing factory since secondary record- 
ing can be done. 

However, it is not realistic to have an encryption center 
create ciphertext for each of the disks manufactured 
throughout the world and to receive the ciphertext via a 
network, because this would cause an enormous in- 
crease in communication traffic. On the other hand, dis- 
tributing the secret key to each software maker and disk 
manufacturing factory is not possible from the viewpoint 
of security. A method that can overcome this problem is 
therefore needed. 

[0125] As a method to overcome this problem, the 
present invention provides the master key/subkey sys- 
tem. According to the present invention, the key man- 
agement center (key issuing center) keeps the master 
secret key which is not disclosed to the outside. On the 
other hand, the software company keeps the sub secret 
key with which the company maintains the security of 
its software on its own responsibility. As already de- 
scribed with reference to Figure 32, the software feature 
information and the sub public key the software compa- 
ny keeps are jointly encrypted, using the master secret 
key, into the first ciphertext. The reproduction apparatus 
decrypts the first ciphertext by applying the master pub- 
lic key, and extract the sub public key from the decrypted 
text. This prevents illegal alterations from being made 
to the sub public key that becomes necessary to decrypt 
the second ciphertext, i.e., the encrypted version of the 
marking position information. 
[0126] This means that a particular software product 
can only be encrypted using a particular secret key, that 
is, the software maker's secret key corresponding to the 
sub public key. Using the sub secret key, the software 
maker can set the key on software locked or unlocked 
at their option. 

[01 27] This in turn means that pirates cannot produce 
pirated disks unless they steal the sub secret key infor- 
mation unique to the software from the software maker. 
[0128] In Figure 32, the software maker combines 
disk physical position information 868 and disk ID 869, 
and encrypts them together by using the sub secret key 
876 in step 866f to construct a public key cipher 859 
which is recorded on the optical disk 800 in the form of 
a barcode. This permits the software maker to produce 
piracy-protected disks without having to have the mas- 
ter secret key 866a. The effect of this is to protect the 
security of the master . secret key. 
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If the sub secret key is stolen and pirated disks are pro- 
duced, the damage is limited to the software for which 
that sub secret key was issued. When the software mak- 
er issues a new sub secret key and sub public key, pro- 
duction of pirated disks of the software thereafter can 5 
be prevented. Figures 36 and 37 are general system di- 
agrams showing data flow. 

[0129] In operation, Figure 36 is the same as Figure 
32, and detailed explanation will not be given here. In 
Figure 36, the software company 871 a first sets its own 
sub secret key 876, and computes the sub public key 
861 . The sub public key 861 is combined with the soft- 
ware feature information 861 of the software to be re- 
corded, and transmitted to the key issuing center 872 
via a network such as the Internet. The key issuing cent- 
er 872 encrypts the combined signal with the master se- 
cret key 866a and sends back the encrypted master 
public key 858 to the software company. The software 
company combines it with the software, and sends the 
combined signal to the disk manufacturing factory 873 
where it is recorded on the master disk 867 from which 
the disk 800 is produced. Referring next to Figure 37, 
the software company 871 b forms a marking on the disk 
800, reads the marking position information, encrypts 
the position information with the sub secret key 876 cor- 
responding to the sub public key, and, using a pulsed 
laser 81 3, records the encrypted information on the disk 
800b in the form of a barcode. A detailed description of 
the recording operation has already be given and will 
not be repeated here. 

[01 30] Next, the anti-piracy operation in the reproduc- 
tion apparatus, when reproducing the thus completed 
optical disk, will be described in further detail with refer- 
ence to Figure 38. 

[0131] The operation consists essentially of a soft- 
ware check step 874 and a disk check step 875. In the 
software check step 874, first the first ciphertext is re- 
produce from the disk 800 in step 876a, and then, using 
the master public key stored in the ROM in the repro- 
duction apparatus in step 876c f the first ciphertext is de- 
crypted into plaintext in step 876b. In step 876d, the 
plaintext of the first software feature information 863 and 
sub public key 861 is obtained, and in step 876f, it is 
checked against the second software feature informa- 
tion extracted using the one-direction hash function. If 
the check is NG in step 876g, the operation is stopped; 
if the check is OK, the sub public key is output in step 
876h. If alterations have been made to the sub public 
key or software attributes by a pirate, the two kinds of 
information do not agree, so that the reproduction of an 
illegal disk is prevented. The legitimate sub public key 
is thus obtained at the reproduction apparatus. 
[0132] In the disk check step 875, the sub public key 
is input in step 876k, and the second ciphertext, i.e., the 
public key cipher 859 (see Figure 32), is reproduce in 
step 876m. 

In step 876n, the second ciphertext is decrypted into 
plaintext by using the sub public key, and in step 876p, 



the marking position information is obtained. In this 
case, the marking position information cannot be altered 
illegally unless the sub secret key 876 (see Figure 32) 
corresponding to the sub public key is leaked out. In step 
876p, the actual position of the marking formed on the 
disk by laser is read, and in step 876r, this position is 
checked. If the result is NO in step 876s, the operation 
is stopped in step 876t, producing a display "Pirated 
Disk". If the result is YES, the reproduction operation is 
allowed to continue in step 876u. 
[0133] With the above construction, illegally duplicat- 
ed disks cannot be reproduced on the reproduction ap- 
paratus unless the sub secret key maintained at the soft- 
ware maker is stolen or unless the nonreflective marking 
portion is laser-trimmed with an accuracy of submi- 
crons, for example, 0.13 urn, and two disks are laminat- 
ed together with an accuracy of the order of a few mi- 
crons. This makes it virtually impossible to make pirated 
disks. This has the effect of preventing pirating of disks. 
[0134] (c) Detailed description of an example using a 
public key encryption function in combination with a se- 
cret key encryption function 

[0135] A first feature of the encryption system of the 
present invention is the use of two encryption functions, 
a public key encryption function and a secret key en- 
cryption function, when encrypting marking position in- 
formation, etc. on each optical disk. 
[0136] The following description deals with problems 
encountered when actually implementing a piracy pre- 
vention method that uses public key cipher, and also 
deals with a method of implementation. The public key 
cipher here refers to the position information encrypted 
using a public key encryption function (for example, an 
RSA function). 

[0137] From the security point of view, it is desirable 
that all reproduction apparatus be equipped with a pub- 
lic key cipher decoder to decode the anti-piracy public 
key cipher of the present invention. However, process- 
ing a 512-bit public key cipher requires 0.3 seconds us- 
ing a 32-bit, 50-MHz CPU. On the other hand, the DVD 
player control IC predominant in consumer apparatus 
today is an 8-bit one-chip microcomputer. With this 
CPU, it will take more than a few minutes to process the 
public key. This means that the user has to wait a few 
minutes before an image is reproduced from a DVD. 
This poses a problem in employing the public key cipher 
system in consumer products. 
[0138] Since, at the present level, public key cipher 
cannot be processed by the CPU used in consumer 
products, for the present there is no option but to use a 
secret key cipher decoder for consumer reproduction 
apparatus because it requires a small amount of 
processing time; However, in the case of secret key ci- 
pher, since the secret encryption key can be easily de- 
ciphered from cipher, decoder information, the secret 
key cipher will lose its anti-piracy effect once deci- 
phered. Therefore, transferring to public key cipher 
which is difficult to decipher is imperative in the future. 
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[0139] Secret key cipher and public key cipher are 
mutually incompatible. If the system were simply 
switched from secret key cipher to public key cipher in 
future, second-generation optical disks having public 
key cipher would not be able to be decoded and repro- 
duced on a first-generation player having a secret key 
cipher decoder. Furthermore, first-generation optical 
disks having secret key cipher would be unable to be 
reproduced on a future player. If the player is construct- 
ed to allow the reproduction of such disks, it will allow 
pirates to decipher the secret key for the secret key ci- 
pher and create the secret key cipher using the deci- 
phered key, thus giving rise to the possibility of pirated 
disks being marketed in large quantities. If disks en- 
crypted with secret key are allowed to be reproduced on 
future players, piracy cannot be prevented even if public 
key cipher is used. 

[0140] The need therefore arises for a mechanism 
which, if the cipher decoder of reproduction apparatus 
is changed from the secret key to the public key system 
in the future, can preserve compatibility to allow earlier 
optical disks to be reproduced properly on reproduction 
apparatus having a new public key cipher decoder while 
preventing the reproducing of pirated disks. 
[0141] A method of the invention that satisfies the 
need for compatibility is disclosed hereinafter. As shown 
in Figure 39, the optical disk of the invention has both a 
secret key cipher recording portion 879 and a public key 
ciphertext recording portion 880. The manufacturing 
method will be described later with reference to Figure 
29. First, when reproducing the optical disk of Figure 39 
on a first-generation reproduction apparatus equipped 
with a secret key cipher decoder 881 , the first physical 
feature information (corresponding to the encrypted ver- 
sion of the position information) unique to the legitimate 
disk is read from the secret key cipher recording portion 
879 on the disk, and decrypted by the secret key cipher 
decoder 881 into plaintext. Further, the second physical 
feature information (corresponding to the measured po- 
sition information) of the disk is measured, and the two 
kinds of physical information are compared. 
[0142] In the case of a legitimate disk, the disk is nor- 
mally reproduced since the two kinds of physical feature 
information agree, as shown in step 878a. 
[0143] In the case of a pirated disk, since they do not 
agree as shown in step 878c, the reproduction of the 
disk is prevented. That is, the reproduction is prevented 
as long as the secret key cipher remains unbroken. If it 
is broken some time in the future by a pirate, as earlier 
described, the pirate can produce illegal disks in large 
quantities by illegally creating the secret key cipher. 
[01 44] In that case, since the secret key decoder 881 
in the first-generation reproduction apparatus checks 
only the secret key cipher, the comparison checks OK 
as shown in step 878d, allowing the illegal pirated disk 
to be reproduced. However, by that time in the future, 
second-generation reproduction apparatus having a 
public key cipher decoder 882 will have become a pre- 



dominant type; therefore, reproducing pirated disks on 
the firsUgeneration reproduction apparatus in an illegal 
manner will not have a significant impact. 
[0145] Since the legitimate disk of the invention has 
5 public key cipher, the disk is normally reproduced on the 
second-generation reproduction apparatus, as shown in 
step 878b. On the other hand, when a pirated disk is 
inserted for reproduction, the reproduction apparatus 
checks only the public key cipher, as shown in step 
878e ( whether the secret key cipher is deciphered or 
not. As a result, the anti-piracy function of the public key 
cipher works, as shown in step 878e, so that the repro- 
ducing of the pirated disk on the second-generation re- 
production apparatus is almost perfectly prevented. 
[0146] According to the invention, all disks are man- 
ufactured with both the secret key cipher 879 and public 
key cipher 880 prewritten thereon from the time of com- 
mercial introduction of the first-generation reproduction 
apparatus. Therefore, in the first stage, piracy preven- 
tion at the secret key cipher level is provided since the 
ciphertext can be processed by the 8-bit microcomputer 
mounted in the first-generation reproduction apparatus. 
In the second stage, that is, in the future when the secret 
key cipher may have be broken, more sophisticated pi- 
racy prevention can be provided by the public key cipher 
decoder incorporated in the second-generation appara- 
tus which will have become the predominant type by that 
time. In this way, if one generation is replaced by the 
next generation, perfect compatibility with earlier media 
can be preserved uninterruptedly with the second-gen- 
eration reproduction apparatus achieving nearly perfect 
piracy prevention. 

[01 47] The above has described an example of appli- 
cation to the low reflectivity marking method, that is, the 
piracy prevention method at the reflective layer level, 
but it will be appreciated that the effect of preserving 
compatibility at the time of generation change can also 
be obtained if the same is applied to the piracy preven- 
tion method at the master disk level that uses the phys- 
ical feature information of the master disk as shown in 
Figure 13. 

[01 48] The above-illustrated example has the feature 
that, when performing encryption, the same information 
is encrypted by using a public key encryption function 
and a secret key encryption function separately, and the 
respectively encrypted versions of the information are 
recorded on the disk. 

[01 49] Accordingly, when a transition is made in future 
from the current player equipped with a decoder, based 
on an 8-bit microcomputer, for decoding the ciphertext 
created using a secret key encryption function to the fu- 
ture player equipped with a decoder, based on a 32-bit 
microcomputer, for decoding the ciphertext created us- 
ing a public key encryption function, the optical disk as 
described in the above example can be used effectively 
on either type of player. 

[01 50] (B) Other mechanisms will be described. 
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(a) We will describe another specific example of the 
public key/secret key combination type in which the 
software feature information, ID number, and mark- 
ing position information are encrypted (see Figure 
29). The ID number refers to the number assigned 
to each disk for identifying the disk. The disk ID (also 
called the disk ID number) to be described later is 
the same in meaning to the ID number. Major differ- 
ences between the present example and the fore- 
going specific example (see Figures 32, 36, and 37) 
are: (1) In the foregoing specific example, the soft- 
ware feature information is written on the master 
disk as the first ciphertext and the marking position 
information is written on a pressed disk as the sec- 
ond ciphertext, while in the present example, the 
software feature information, the ID number, and 
the marking position information are ail combined 
together for encryption and the encrypted text is 
written on an already pressed disk; (2) In the fore- 
going example, two-stage encryption is performed 
using the master secret key and sub secret key, 
while in the present example, encryption is per- 
formed only with master secret key without using a 
key corresponding to the sub secret key. 

More specifically, as shown in Figure 29, the 
above combined signal is encoded in a secret key 
encryption section 832 by using a secret key 834 
for secret key encryption. The same combined sig- 
nal is also encoded in a public key encryption sec- 
tion 831 by using a secret key 833 for public key 
encryption. In this way, public key cipher is used in 
conjunction with secret key cipher. This overcomes 
the problem that the current reproduction apparatus 
can only decode the secret key cipher because of 
the slow processing speed of its microcomputer. 
Future reproduction apparatus will use a higher- 
speed microcomputer, for example, of 32-bit config- 
uration and performs a piracy check by decoding 
only the public key cipher having a higher degree 
of security; therefore, piracy can be prevented al- 
most perfectly. If the secret key cipher is broken 
some time in the future, since the public key-type 
player will be the predominant type by that time, 
substantial prevention of piracy can be accom- 
plished. By recording the public key cipher simulta- 
neously with the secret key cipher on the media, if 
a transition occurs from the current generation to 
the next-generation player, the media can be repro- 
duced on reproduction apparatus of old generation 
while substantially achieving piracy prevention. 

(b) Next, a modulation recording method for bar- 
code will be described in detail with reference to the 
same figure. 

In Figure 29, a barcode recording apparatus 
(PWM recording apparatus) 845 is used to write the 
encrypted information onto the disk. 

First, information concerning the position of the 
nonreflective portion 815 formed on the reflective 



layer 802 or on the second reflective layer 825 is 
detected using optical mark position detecting 
means 600. The method of detection has already 
been described with reference to Figure 15, etc., 

5 and therefore, explanation will not be repeated 
here. The optical mark position information, the 
software feature information and the ID number 
generated by ID generator 546 are combined by 
combining means 830. The software feature infor- 

10 mation is obtained by feature-extracting from a part 
of the software contents using a one-direction hash 
function such as SHA, and by obtaining a hash val- 
ue of 1 28 bits or 1 60 bits. The ID number generator 
546 has already been described with reference to 

is Figure 1 4, and therefore, explanation will not be re- 
peated here. In the encryption section 830, the com- 
bined signal of the physical feature information is 
encoded in the public key encryption section 831, 
such as RSA, by using the secret key 833 for public 

20 key encryption. 

The above public key cipher and the secret key 
cipher are combined in a combining section 835, 
and are affected with interleaved/Reed-Solomon 
error corrections by a Reed-Solomon encoder 838 

25 and an interleaver 839 in an error-correcting encod- 
er 837 of a recording circuit 836. 
The interleave length in this case is so set as to be 
able to correct a burst error due to a disk scratch 
2.38 mm or longer, the same level as the CD, there- 
to by resulting such effect to provide error correction 
of errors in the barcode recorded data of the inven- 
tion against a disk scratch that may be caused in 
the worst condition in consumer use. 

The principle of the pulse width modulation 

35 method will be described with reference to the same 
figure. This method eliminates the need for the first 
ciphertext by the master secret key and the second 
ciphertext by the sub secret key. In this method, the 
software feature information, the position informa- 

40 tion, and the ID number are combined together for 
encryption. Billions of ROM disks are produced an- 
nually. Therefore, there is a possibility that a disk 
that happens to have a marking whose position pat- 
tern is very easy to duplicate may be produced. A 

45 pirated disk could be produced by using a combi- 
nation of this easily duplicatable marking position 
information and the legitimate ciphertext of this po- 
sition information. In Figure 29, the position infor- 
mation is combined with the software feature infor- 

so mation for encryption or for authentication by signa- 
ture. The position information is therefore insepara- 
ble from the software feature information. This 
means that if an easily duplicatable mark happens 
to be produced, it is only possible to produce pirated 

55 disks having corresponding software contents, so 
that potential damage will be greatly limited. It will 
be recognized here that this ciphertext may be re- 
corded on the master disk. 
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The error-correction coded signal is modulated 
into a PWM signal by a pulse interval modulator 
840. When describing lines by using a laser, it is 
difficult to construct a barcode by accurately con- 
trolling the line width. Therefore, in the present in- 5 
vention, the pulse interval is classified into four val- 
ues 1T, 2T, 3T, and 4T, as shown in Figure 30 f and 
by encoding marks 843b, 843c, 843d, and 843e as 
00, 01, 10, and 11, for example, 2-bit data can be 
transmitted with one barcode. As shown in a table 10 
842 showing the relationship between line width 
and recording rate in Figure 30, when recording a 
PIM barcode in a lead-in area of the ROM disk 800 
with line width 10 urn, it can be seen that 5.6 kbits 
of information can be written additionally on the 1$ 
completed disk in one revolution. 

Part (1) of Figure 31 shows a nonreflective por- 
tion detection signal. 

The signals have a synchronizing signal area 
858, consisting of three pulses 857a, 857b, and 20 
857c with interval T; this area indicates the starting 
position. This is followed by a blank of 4T which is 
a reference time area for measuring reference time 
T. When the line width is 10 urn, T = 20 ^im. Next 
comes a first recording area 860 of about 1 kbits for 25 
holding secondary-recorded data. Then, preceded 
by a blank 861a of 100 |im or greater length, there 
is recorded a second recording area 862a for terti- 
ary-recorded data. A password for descrambling, 
etc. are recorded at a dealer. so 

(c) The following describes the method of use of the 
barcode which can secondary- and tertiary-record 
by the HMST method. 

As shown in Figure 35, in process (2), the soft- 
ware maker may produce a disk 844b on which the 35 
ID number unique to the disk and a private key used 
for secret communication with a user are recorded. 
The disk 844c, 844d can be reproduced without re- 
quiring any special procedure. 

As shown in Figure 21 to be described later, a 40 
recording/reproduction circuit implementing the 
HMST method of the invention can be constructed 
by replacing an MFM modulation/demodulation 
magnetic head in a magnetic recording/re produc- 
tion circuit by a PWM (PIM) modulation/demodula- *s 
tion laser. 

(d) Another specific example of disk manufacturing 
is shown in Figure 35. That is, in process (3) of Fig- 
ure 35, which shows another application of the disk, 
information of scrambled MPEG video signal or the so 
like is recorded on a disk 844e. A brief operational 
description of MPEG scrambling will be given be- 
low. An MPEG compressed video signal is split be- 
tween a variable-length encoder for AC compo- 
nents and a fixed-length encoder, each containing 55 
a random number adder, for scrambling. In the 
present invention, a descrambling signal is encrypt- 
ed by an encryption encoder using a one-direction 



function. Further, a portion of a compression pro- 
gram in an image compression controller is com- 
pressed by the encryption encoder. This makes it 
difficult for a replicating company to exchange the 
encryption encoder with an illegal one. Accordingly, 
only legitimate disks are decrypted with sub public 
key. 

Referring back to Figure 35, we will describe 
next how the disk 844e manufactured in the above 
process (3) is processed in the next process (4) and 
later processes. 

That is, in process (4) of Figure 35, using a mas- 
ter secret key the software company encrypts the 
disk ID number and a sub public key for decoding 
the descrambling signal, and secondary-records 
the encrypted text by barcude on the disk, thus com- 
pleting the disk 844f . Since the disk 844f are scram- 
bled, the disk cannot be reproduced as is. The disk 
ID number mentioned here is the same in meaning 
as the previously described ID number. In process 
(5), after receiving money for the disk from a cus- 
tomer, the dealer generates a password by using 
the disk ID number with the sub secret key corre- 
sponding to the sub public key, and tertiary-records 
the password on the disk. Once the password has 
been recorded, the disk 844g can be reproduced on 
a reproduction apparatus by descrambling the data. 
In the case of a computer program, the program can 
be installed. With this method, if someone shoplifts 
a disk, images or software on the disk cannot be 
reproduced since image scrambling and ciphertext 
are not unlocked. This defeats the effort of a shop- 
lifter, and thus has the effect of preventing shoplift- 
ing. 

(e) We interrupt here our explanation relating to Fig- 
ure 35, and refer back to Figure 21 to describe the 
operation and configuration of a reproduction appa- 
ratus incorporating a recording circuit, as shown, 
concentrating on magnetic recording and reproduc- 
tion circuits which in combination of an optical re- 
production apparatus constitute a recording/repro- 
duction circuit. In Figure 21, a combination of the 
magnetic recording, and reproduction circuits, and 
optical reproduction apparatus is shown, but in- 
stead, a combination of an ordinary optical repro- 
duction apparatus and a floppy disk drive may be 
used. 

[0151] In the figure, the magnetic reproduction circuit 
has two demodulators, an MFM demodulator 30d and a 
second demodulator 6b2(sic) which is another type to 
MFM, one or the other of which is selected by a selector 
661 . The corresponding modulator is kept only at the 
factory, so that a full recording capability is not provided 
although reproduction is possible. Accordingly, when a 
specially modulated area was recorded at the factory, a 
specially modulated signal is not recorded. CPU 665 on 
the drive side performs control so that no recording can 
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be made unless the specially modulated signal is repro- 
duced from this area. Therefore, it can be said that this 
area is a logical write-once area, permitting recording 
only once. Accordingly, once the machine ID, such as a 
drive ID 699a recorded in a ROM 699 in the reproduction 
apparatus, has been recorded in this write-once area of 
a magnetic recording portion on an optical disk or a flop- 
py disk, the user drive cannot alter the recorded con- 
tents, thus preventing illegal installation on more ma- 
chines than a permitted number of machines. The drive 
ID mentioned here is a number assigned to each repro- 
duction apparatus for identifying the apparatus. The ma- 
chine ID may be an ID assigned to a personal computer. 
A network interface section 14 examines an HDD, etc. 
on a second personal computer 663 connected to a net- 
work 664 and supervises the operation so that the pro- 
gram of the same drive ID or same machine ID will not 
be started or run, thus preventing the use of illegally cop- 
ied software. 

[0152] The laser marking recording method of the in- 
vention permits secondary recording such as recording 
of a dealer code at a dealer, as does a magnetic method. 
This, however, does not constitute a feature of the 
present invention, and therefore, detailed explanation 
will not be given here. 

[01 53] In the case of a rental video store, if a password 
were recorded permanently on a disk, and if the disk 
were shoplifted, the shoplifter coutd play back that disk. 
To prevent this, a rental video store hands a scrambled 
disk 844j to a customer, as shown in process (6). In step 
851 g, a password for descrambling is computed from 
the disk ID or the drive ID described later by using a sub 
secret key. In step 851 j, the password is printed on the 
receipt which is handed to the customer. The password 
may be notified to the customer by telephone, as shown 
in step 851 u. 

[0154] The customer performs the descrambling op- 
eration shown in step 851 r on his reproduction appara- 
tus in his home. First, in step 851s, the scramble iden- 
tifier and the software feature information are decrypted 
from the ciphertext by using the sub public key. The de- 
crypted software feature information is compared with 
the software feature information that was actually ex- 
tracted from the software contents by using a one-direc- 
tion hash function, to verify whether they agree or not. 
If verification cannot be done, the disk is regarded as an 
illegal one, and the reproduction is stopped. If the 
scramble identifier is OFF in step 851 x, the reproduction 
operation is permitted in step 851 p. If the scramble iden- 
tifier is ON, the user enters a password from a numeric 
keypad in step 851 k, and the password is computed us- 
ing the sub public key. In step 851 t t a further computa- 
tion is performed using the disk ID and/or drive ID, and 
only when the result of the password computation 
agrees with the disk ID or drive ID, the scramble or ci- 
phertext is unlocked to permit reproduction or operation 
for a prescribed number of days. When the disk has 
been rented out with a password only for a portion of the 



software to the customer, if the customer desires to view 
other items in the software, the customer can request 
by telephone the key issuing center to issue the pass- 
word for the desired software item; the password is then 
5 notified to the customer in step 851 u and input in step 
851 k to enable the desired software on the disk to be 
reproduced. 

[0155] The operation performed at the video retail 
store or rental video store in processes (5) and (6) in 

10 Figure 35 will be described in further detail with refer- 
ence to Figure 34. The video retail store receives a 
scramble- or encryption-applied disk 844f, and after 
confirming payment from the user, transmits the disk ID 
number and sub public key data of the disk 844f from a 

'5 barcode recording/reproduction apparatus 845 to a 
password issuing center 852 via a POS terminal 846. In 
the case of a small shop system, the password issuing 
center, that is, the system containing the sub secret key 
for the sub public key, may be contained in the POS ter- 

20 minal. The password issuing center inputs the disk ID 
number and time information in step 851 q, performs 
computation in step 851s, performs encryption with the 
sub secret key in step 851 1, and issues a password in 
step 851 g. The password is then transmitted via a net- 

25 work 848 and the POS terminal 846 to the barcode re- 
cording apparatus 845, and the disk 844g with the pass- 
word recorded thereon is handed to the customer. This 
disk 844g can be reproduced as is. 
[0156] Next, the operation performed at the rental 

30 store will be described in detail. First, a ROM disk 844f 
locked with scrambling is displayed on the store shelf. 
When the particular ROM disk 844f is specified by a cus- 
tomer, a shop clerk holds in his or her hand a circular 
barcode reader 850 with a built-in rotary-type optical 

35 head 853 generating a spiral scanning pattern, and 
presses it onto the center of the disk 800 housed in a 
transparent case, to read the barcode formed by nonre- 
flective portions 815 on the reflective layer in the disk 
844f, thereby reading the disk ID number. The product 

40 code may be read either from the barcode of the inven- 
tion formed by the nonref lective portions 81 5 or from the 
circular barcode prerecorded and pressed by the exist- 
ing recording method on an inner ring portion inside the 
pit recording area of the master disk; These items of in- 

45 formation are processed by the POS terminal 846, and 
the rental charge is settled; at the same time, the pass- 
word corresponding to the disk ID number is issued in 
step 851 g, as previously described. For rental purposes, 
to limit the number of days for viewing, time information, 

so as used in step 851 r, is appended to the disk ID number 
for encryption, and the password is thus created. This 
password is valid for a preset number of days, the effect 
being that in the case of a rental disk a rental period of 
3 days, for example, can be set in the password. 

55 [0157] In step 851 i, the thus issued password for un- 
locking the scramble, the date of rent, the expected data 
of return, and the rental charge of the title are printed on 
a receipt 849 which is handed to the customer together 



22 



43 



EP 0 741 382 B1 



44 



with the disk. The customer takes the disk 844j and re- 
ceipt 849 home. 

When, in step 851 k, the password is input from an input 
section 854, such as a numeric keypad, on the informa- 
tion processing apparatus 676 shown in Figure 25, the 
password is computed with the disk ID number and is 
input to a master cipher decoder 534 where the encrypt- 
ed data is decoded into plaintext by using a public key. 
This plaintext is checked in a plaintext data checking 
section 71 5 to determine whether it satisfies a predeter- 
mined condition; only when the password is correct, pro- 
gram data is descrambled by a sub cipher decoder 71 8, 
and the video image is output. 
[0158] In this case, if the password contains time in- 
formation, date data from a clock section 855 is 
checked, and descrambling is allowed as long as the 
date data matches the time information. The password 
and its corresponding ID number are stored in a nonvol- 
atile memory 755a in a memory 755. Once the password 
has been entered, the user need not reenter it to perform 
descrambling. In this way, the key on a disk can be 
locked and unlocked by electronic means, which offers 
an advantage for distribution business. 
[0159] The foregoing embodiments have been de- 
scribed referring mainly to the disk ID method wherein 
a disk ID is appended to a disk. However, in the case of 
disks that do not have disk IDs, it becomes necessary 
to use the drive ID of the drive. The following description 
deals in detail with the descrambling, password crea- 
tion, and checking operations when the drive ID alone 
is used and also when both the drive ID and disk ID are 
used. 

[0160] In Figure 35, when using a password relating 
to the drive ID for descrambling the software, the drive 
ID 699a stored in a ROM in the reproduction apparatus 
is transmitted from a signal section 851 z in Figure 34 to 
the password issuing center by telephone or via person- 
al computer communication. In the password issuing 
center, using the drive ID and the software ID in step 
851 q, computation is performed in step 851s, and the 
result is encrypted with sub secret key in step 851 1, 
thereby creating a password in step 851 g. In step 851 u, 
the password is transmitted to the communication sec- 
tion 85z(sic) in the reproduction apparatus including the 
user's personal computer, by telephone or via personal 
computer communication. The user enters the pass- 
word in step 851 k, and decryption computation is per- 
formed using the sub public key in step 851m. In step 
851 1, the drive ID is compared with the result of the com- 
putation, and if they do not match, the operation is 
stopped. If they match, reproduction or operation is per- 
formed in step 851 p. 

[0161] The advantages and disadvantages of the 
drive ID method and the disk ID method will be de- 
scribed. When the disk ID is used, the password is valid 
only for one particular disk. The disk can be run on any 
drive. This method is therefore suitable for movie soft- 
ware and the like. However, in the case of business soft- 



ware for personal computers, if the software can be in- 
stalled on any drive, the software on the disk may be 
illegally copied onto more than one computer. 
[01 62] That the disk can be run only on one drive is a 

5 disadvantage of the drive ID method in the case of movie 
software. This, however, becomes an advantage in the 
case of personal computer software. For business soft- 
ware that need only be installed once, the drive ID meth- 
od has an advantage in that its password-protect un- 

10 locking feature prevents the software from being illegally 
installed on a personal computer by using other drives 
than the one designated drive. 
[0163] However, the drive ID is written in an EPROM 
in the machine, and can be easily altered. If drives of 

is the same drive ID are sold, illegal installation may be 
made on many machines. On the other hand, as already 
described, it is . difficult to alter the disk ID of the present 
invention. In Figure 34, if provisions are made to create 
a password for both disk ID and drive ID in step 851 q 

20 and to check both IDs in step 851t, the disk ID is pre- 
vented from being altered. The resulting effect is that if 
drives of the same drive ID are distributed in large quan- 
tities, since the disk ID is valid only for one particular 
disk, illegal installation on many machines is sup- 

25 pressed. 

[0164] As described above, the drive ID method and 
the disk ID method have their own advantages and dis- 
advantages, and the advantages are different for differ- 
ent applications. It is expected that the drive ID method 

30 will be used for computer software that is installed only 
once, and the disk ID method for movie or music soft- 
ware that is reproduced many times. This requires that 
the reproduction apparatus be designed to support both 
methods. Using the flowchart of Figure 42, we will de- 

35 scribe an operational procedure that handles both the 
drive ID and disk ID. When installation is started, first 
the scramble identifier is checked in step 901a whether 
it is ON or not. If the software is scrambled and the iden- 
tifier is OFF, this means an illegal operation, and the in- 

40 stallation stops. 

The installation also stops if the identifier is ON though 
the software is not scrambled. As already described, this 
scramble identifier cannot be altered and is therefore ef- 
fective in preventing illegal installation. In step 901 c, the 

45 personal computer is connected to the password issuing 
center via a network. In step 901 d, user ID is entered, 
and in step 901 e, if the reproduction apparatus has a 
drive ID, the drive ID is transmitted to the password is- 
suing center. 

so After confirming payment, the password issuing center 
performs encryption and computation on the drive ID 
and software ID by using a sub secret encryption key, 
to generate a password. The personal computer at the 
user end performs computation to decrypt the password 

55 by using a sub public key, and compares it with the ma- 
chine ID of the personal computer or the drive ID of the 
drive. If they do not match, the operation stops; if they 
match, the installation program is run in step 901 n. In 
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the above case, that is, when computing the password 
with the drive ID in step 901 k, a program decryption key 
may be output to accomplish decryption or descram- 
bling. 

[0165] Turning back to step 901 e t if there is no drive s 
ID, then it is checked in step 901 h whether a disk ID is 
recorded on the disk, and if there is no disk ID, the in- 
stallation stops. If a disk ID is recorded, the disk ID and 
the software ID are transmitted to the password issuing 
center. The password issuing center communicates with 
a credit company, and after confirming online payment 
by credit, creates a password in step 901 j from the disk 
ID and software ID by using the sub secret key. The per- 
sonal computer at the user end decrypts the password 
by using the sub public key in step 901 m, and if the result 
checks OK, program installation or software reproduc- 
tion is carried out. 

[0166] In this way, both the drive ID and disk ID can 
be handled. This has the effect of preventing illegal in- 
stallation while allowing legitimate installation of soft- 
ware products having various IDs. 
[0167] Thus by encrypting the disk physical ID by a 
one-direction encryption encoder, copy protection secu- 
rity can be enhanced. 

[0168] As described above, according to the present 
embodiment, a nonreflective portion is formed on a re- 
flective layer in an optical disk consisting of two disks 
laminated together, and at least its position information 
is encrypted and written on the same optical disk. This 
makes duplication much more difficult as compared to 
the prior art. Production of illegal copies, that is, so- 
called pirated disks, can thus be made virtually impos- 
sible. 

[0169] As is apparent from the description so far giv- 
en, the present invention has the advantage of achiev- 
ing a greatly improved copy prevention capability , as 
compared to the prior art. 

[0170] Furthermore, according to the present inven- 
tion, a piracy check mechanism can be incorporated into 
the master disk by encrypting formatted master disk 
physical feature information 876 in combination with 
public key data and software feature information, as de- 
scribed with reference to Figure 32, etc. This further in- 
creases security. 

[01 71 ] In Figure 26, a method was disclosed that pro- 
vides greater network security for online shopping com- 
panies. According to this method, the online shopping 
company secondary-records the private key for secret 
communication on all disks and distributes it to users, 
eliminating the need for sending the private key to the 
user by mail and also saving the user the trouble to key 
in the private key of many digits. Furthermore, since the 
user need not enter the private key by himself, a large 
numeric value consisting of 100 or more digits can be 
used as the private key. This greatly improves network 
security. 

[01 72] In the above embodiment, the marking position 
information of the invention was written on the same 



disk, but the invention is not limited to the illustrated ex- 
ample. For example, the information may be written on 
a floppy disk as a different medium. 
[01 73] Furthermore, in the above embodiment, exam- 
ples have been described wherein an elliptic function or 
an RSA function is applied to the digital signature or dig- 
ital signature-like technique or encryption technique. 
However, the invention is not limited to the illustrated 
examples, for example, a secret key encryption function 
such as DES, or any other encryption technique may be 
used. 

[0174] Moreover, in the above embodiment, the posi- 
tion information was encrypted or was provided with a 
digital signature, but instead, the position information it- 
self may be written directly on the disk. In that case also, 
the invention is effective in preventing pirated disks from 
being made by copying the marking and its position in- 
formation. 

[01 75] The optical disk of the invention has a structure 
such that a reflective film is sandwiched directly or indi- 
rectly between two members resistant to laser light and 
a marking is formed by laser on the reflective film. The 
above embodiment has described examples in which 
this structure is used for a piracy prevention technique, 
but it will be appreciated that such a structure may also 
be . applied to other techniques. In the above embodi- 
ment, the optical disk of the invention has been de- 
scribed as being fabricated by laminating two substrates 
with an adhesive layer interposed therebetween. How- 
ever, the adhesive layer may be omitted, or instead, a 
member made of a different material, such as a protec- 
tive layer, may be used; that is, any suitable structure 
may be used as long as the reflective film is sandwiched 
directly or indirectly between two members resistant to 
laser light. Furthermore, in the above embodiment, the 
optical disk of the invention has been described as com- 
prising substrates as the members that are laminated 
together, but other members such as protective layers 
may be used; that is, any member that has resistance 
to laser light may be used. 

[0176] In the above embodiment, a combination of 
two kinds of cipher, secret key cipher and public key ci- 
pher, has been described as a representative example 
of a combination of multiple kinds of ciphers of different 
generations, but the invention is not limited to this par- 
ticular example. For example, as an alternative combi- 
nation of different generations, public key cipher having 
a 256-bit secret key, which is less secure but can be 
processed by a slow CPU, and public key cipher having 
a 1 024-bit secret key, which provides great security but 
can only be processed by ; a highspeed CPU, may be 
used. In this way, with a combination of public key ci- 
phers having different security levels, the same effect of 
preserving compatibility between different generations 
can be obtained. Furthermore, a combination of three 
kinds of ciphers of different generations, such as secret 
key cipher, low-security public key cipher, and high-se- 
curity public key cipher, may also be used. 
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ware contents written to said disk and a sub 
public key of a public key encryption function 
by using a master secret key of said public key 
encryption function; and 

second encrypting means for encrypting said 
information indicating said position of said 
marking by using a sub secret key correspond- 
ing to said public key, and 

said position information writing means writes 
contents encrypted by said first encrypting 
means and said second encrypting means to 
said disk. 



5. The marking forming apparatus according to claim 
1 , wherein 

said position information writing means com- 
prises digital signature means for applying a digital 
20 signature to said information indicating said position 
of said marking and wires information concerning a 
result of said digital signature by said digital signa- 
ture means to said disk. 

25 6. The marking forming apparatus according to claim 
5, wherein 

said digital signature means uses a secret key 
(879) of a public key (880) encryption function for 
said digital signature. 

30 

7. The marking forming apparatus according to claim 
5, wherein 

said digital signature means comprises; 

35 first digital signature means for applying a dig- 

ital signature to software feature information 
concerning features of software contents writ- 
ten to said disk and to a sub public key of a pub- 
lic key encryption function; and 

40 

second digital signature means for applying a 
digital signature to said information indicating 
said position of said marking by using a sub se- 
cret key corresponding to said sub public key, 
45 and 

said position information writing means writes 
a result of said digital signature by said first dig- 
ital signature means and a result of said digital 
50 signature by said second digital signature 

means to said disk. 



INDUSTRIAL APPLICABILITY 

[0177] As described above, in the present invention, 
for example, a marking is formed by a laser on a reflec- 
tive film of a disk holding data written thereon and at 
least position information of the marking or information 
concerning the position information is written on the disk 
in an encrypted form or with a digital signature append- 
ed thereto, therefore, it is possible to provide a greatly 
improved copy prevention capability as compared to pri- 
or known construction. 



Claims 

1 . A marking forming apparatus comprising: 

marking means (813) for forming a marking 
(584) on a reflective film (802) of a disk (800) 
wherein the marking is not part of the data re- 
corded on the disk; 

marking position detecting means (596) for de- 
tecting a position of said marking (584) on said 
reflective film (802) of said disk (800); and 

position information writing means (813) for 
writing information indicating said position of 
said marking (584) on said disk (800); 

characterized in that 

said information indicating said position of 
said marking (584) is either encrypted or digitally 
signed by using an encryption key (876) by said po- 
sition information writing means (813). 

2. The marking forming apparatus according to claim 
1 , wherein 

said marking forming detecting means (596) 
measures said position of said marking (584) with 
an accuracy which exceeds the positional precision 
with which said marking (584) can be formed. 

3. The marking forming apparatus according to claim 
1 , wherein 

said position information writing means (813) 
comprises encrypting means for encrypting said in- 
formation indicating said position of said marking 
(584) by using a secret key of a public key encryp- 
tion function or a secret key of a secret key encryp- 
tion function. 

4. The marking forming apparatus according to claim 
3, 

wherein said encrypting means comprises; 

first encrypting means for encrypting software 
feature information concerning features of soft- 



8. The marking forming apparatus according to claim 
1 , wherein 

55 said position information writing means writes 

coexistently such information that is processed by 
using plural kinds of encryption techniques or digital 
signature techniques with regard to a same position 
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information. 

9. The marking forming apparatus according to claim 
3, 4, 6 or 7, wherein said public key encryption func- 
tion is an RSA function. 

10. The marking forming apparatus according to any 
one of claims 1 to 9, wherein said disk is constructed 
by laminating two disks together. 

11. A method for forming a marking on a disk wherein 
the marking is not part of the data recorded on the 
disk, comprising the steps of: 

forming a marking on a reflective film of a disk; 

detecting a position of said marking on said re- 
flective film of said disk; and 

writing information indicating said position of 
said marking on said disk; 

characterized in that 

said information indicating said position of 
said marking is either encrypted or digitally signed 
by using an encryption key. 

12. The method according to claim 11 , wherein 

said position of said marking is detected with 
an accuracy which exceeds the positional precision 
with which said marking can be formed. 

13. A method for manufacturing a disk, comprising the 
steps of: 

forming a reflective film on a disk; 

forming a marking on said reflective film where- 
in the marking is not part of the data recorded 
on the disk; 

detecting a position of said marking; and 

writing information indicating said position of 
said marking on said disk; 

characterized in that 

said information indicating said position of 
said marking is either encrypted of digitally signed 
by using a secret key. 

14. The method according to claim 13, wherein 

said position of said marking is detected with 
an accuracy which exceeds the positional precision 
with which said marking can be formed. 

15. A disk comprising a reflective film on which a mark- 
ing is formed and having information indicating a 



position of said marking on said reflective film 
wherein the marking is not part of the data recorded 
. on the disk; 

characterized in that 
5 said information indicating said position of 

said marking is either encrypted or digitally signed 
by using a secret key. 

16. The disk according to claim 15, wherein 
10 said position of said marking of said informa- 

tion recorded on said disk is information measured 
with an accuracy which exceeds the positional pre- 
cision with which said marking can be formed. 

is 17. A reproduction apparatus for a disk (9102) which 
comprises a reflective film on which a marking 
(91 03) is formed which is not part of the data record- 
ed on the disk and has information indicating a po- 
sition of said marking (9103) on said reflective film, 

20 comprising: 

position information reading means (9101) for 
reading said information indicating a position of 
said marking; and 

25 

marking reading means (9106) for reading an 
actual position of a marking (9103) on the disk 
(9102); 

30 characterized in that 

said information indicating said position of said 
marking (9103) is either encrypted or digitally 
signed by using a secret key; 

35 

said position information reading means com- 
prises decrypting means (9105) for decrypting 
said information indicating said position of said 
marking (9103); and 

40 

said reproduction apparatus further comprises 
comparing/judging means (9107) for compar- 
ing said actual position read by said marking 
reading means (9106) with said information in- 
45 dicating said position of said marking (9103) 

read by said position information reading 
means (9101) to decide whether to reproduce 
data on the disk (9102). 

so 18. The reproduction apparatus according to claim 17, 
wherein 

said position of said marking (9103) of said 
information recorded on said disk (91 02) is informa- 
tion measured with an accuracy which exceeds the 
55 positional precision with which said marking (9103) 
can be formed. 

19. The reproduction apparatus according to claim 17, 
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wherein 

said information indicating said position of said 
marking (91 03) is encrypted by using a secret 
key of a public key encryption function, and 

said decrypting means (91 05) decrypts said in- 
formation indicating said position of said mark- 
ing (91 03) by using a public key corresponding 
to said secret key. 

20. The reproduction apparatus according to claim 17, 
wherein 

said decrypting means (9105) comprises; 

first decrypting means for decrypting software 
feature information concerning features of soft- 
ware contents written to said disk (91 02) and a 
sub public key of a public key encryption func- 
tion by using a master public key corresponding 
to a master secret key of said public key en- 
cryption function; and 

second decrypting means for decrypting said 
information indicating said position of said 
marking (9103) by using a sub secret key cor- 
responding to said sub public key. 

21. The reproduction apparatus according to claim 20, 
wherein said public key encryption function is an 
RSA function. 



Patentanspruche 

1. Gerat zur Erzeugung einer Markierung, das um- 
fasst: 

eine Markierungseinrichtung (813) zum Erzeu- 
gen einer Markierung (584) auf einer reflektie- 
renden Schicht (802) einer Platte (800), wobei 
die Markierung nicht Teil der auf der Platte auf- 
gezeichneten Daten ist; 

eine Markierungspositions-Erfassungseinrich- 
tung (596), die eine Position der Markierung 
(584) auf der reflektierenden Schicht (802) der 
Platte (800) erfasst; und 

eine Positionsinformations-Schreibeinrichtung 
(813), die Informationen schreibt, die die Posi- 
tion der Markierung (584) auf der Platte (800) 
anzeigen; 

dadurch gekennzeichnet, dass: 
die Informationen, die die Position der Markierung 
(584) anzeigen, von der Positionsinformations- 
Schreibeinrichtung (813) unter Verwendung eines 



Verschlusselungscodes (876) entweder verschlus- 
selt Oder digital signiert werden. 

2. Gerat zur Erzeugung einer Markierung nach An- 
5 spruch 1 , wobei: 

die Markierungserzeugungs-Erfassungseinrich- 
tung (596) die Position der Markierung (584) mit ei- 
ner Genauigkeit misst, die die Positionsgenauigkeit 
ubertrifft, mit der die Markierung (584) erzeugt wer- 
10 den kann. 

3. Gerat zur Erzeugung einer Markierung nach An- 
spruch 1 , wobei: 

die Positionsinformations-Schreibeinrichtung (813) 
15 eine Verschliisselungseinrichtung umfasst, die die 
Informationen, die die Position der Markierung 
(584) anzeigen, unter Verwendung eines geheimen 
Schlussels einer Verschlusselungsfunktion mit 6f- 
fentlichem Schlussel oder eines geheimen Schlus- 
20 sels einer Verschlusselungsfunktion mit geheimem 
Schlussel verschlusselt. 

4. Gerat zur Erzeugung einer Markierung nach An- 
spruch 3, wobei die Verschlusselungseinrichtung 

25 umfasst: 

eine erste Verschlusselungseinrichtung, die 
Software-Merkmalinformationen, die Merkma- 
le von Software-lnhalten betreffen, die auf die 
30 Platte geschrieben sind, sowie einen offentli- 

chen Unterschlussel einer Verschlusselungs- 
funktion mit offentlichem Schlussel unter Ver- 
wendung eines geheimen Hauptschlussels der 
Verschlusselungsfunktion mit offentlichem 
35 Schlussel verschlusselt; und 

eine zweite Verschlusselungseinrichtung, die 
die Informationen, die die Position der Markie- 
rung anzeigen, unter Verwendung eines gehei- 
40 men Unterschlussels verschlusselt, der dem 

offentlichem Schlussel entspricht, und 

die Positionsinformations-Schreibeinrichtung 
mit der ersten Verschlusselungseinrichtung 
45 und der zweiten Verschlusselungseinrichtung 

verschlusselte Inhalte auf die Platte schreibt. 

5. Gerat zur Erzeugung einer Markierung nach An- 
spruch 1 , wobei: 

so die Positionsinformations-Schreibeinrichtung eine 
Einrichtung fur digitate Signatur umfasst, die die In- 
formationen, die die Position der Markierung anzei- 
gen, mit einer digitalen Signatur versieht und Infor- 
mationen bezuglich eines Ergebnisses der digitalen 
55 Signatur durch die Einrichtung fur digitale Signatur 
auf die Platte schreibt. 

6. Gerat zur Erzeugung einer Markierung nach An- 
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spruch 5, wobei: 

die Einrichtung fur digitale Signatur einen geheimen 
Schlussel (879) einer Verschlusselungsfunktion mit 
offentlichem Schlussel (880) fur die digitale Signa- 
tur nutzt. 

7. Gerat zur Erzeugung einer Markierung nach An- 
spruch 5, wobei: 

die Einrichtung fur digitale Signatur umfasst: 

eine erste Einrichtung fur digitale Signatur, die 
Software-Merkmalinformationen, die Merkma- 
le von Software-lnhalten betreffen, die auf die 
Platte geschrieben sind, und einen offentlichen 
Unterschlussel einer Verschlusselungsfunktion 
mit offentlichem Schlussel mit einer digitaien 
Signatur versieht; und 

eine zweite Einrichtung fur digitale Signatur, die 
die Informationen, die die Position der Markie- 
rung anzeigen, unter Verwendung eines gehei- 
men Unterschlussels, der dem offentlichen Un- 
terschlusse! entspricht, mit einer digitaien Si- 
gnatur versieht, und 

wobei die Positionsinformations-Schreibein- 
richtung ein Ergebnis der digitaien Signatur 
durch die erste Einrichtung fur digitale Signatur 
und ein Ergebnis der digitaien Signatur durch 
die zweite Einrichtung fur digitale Signatur auf 
die Platte schreibt. 

8. Gerat zur Erzeugung einer Markierung nach An- 
spruch 1, wobei: 

die Positionsinformations-Schreibeinrichtung 
gleichzeitig Informationen, die unter Verwendung 
mehrerer Typen von Verschlusselungstechniken 
Oder Techniken digitaler Signatur verarbeitet wer- 
den, bezuglich der gleichen Positionsinformationen 
schreibt. 

9. Gerat zur Erzeugung einer Markierung nach An- 
spruch 3, 4, 6 oder 7 ( wobei die Verschlusselungs- 
funktion mit offentlichem Schlussel eine RSA-Funk- 
tion ist. 

10. Gerat zur Erzeugung einer Markierung nach einem 
der Anspruche 1 bis 9, wobei die Platte hergestellt 
wird, indem zwei Platten laminiert werden. 

11. Verfahren zur Erzeugung einer Markierung auf ei- 
ner Platte, wobei die Markierung nicht Teil der auf 
der Platte aufgezeichneten Daten ist, das die fol- 
genden Schritte umfasst: 

Erzeugen einer Markierung auf einer reflektie- 
renden Schicht einer Platte; 



Erfassen einer Position der Markierung auf der 
reflektierenden Schicht der Platte; und 

Schreiben von Informationen, die die Position 
s der Markierung auf der Platte anzeigen; 

dadurch gekennzeichnet, dass: 

die Informationen, die die Position der Markierung 
anzeigen, unter Verwendung eines Verschlusse- 
10 lungscodes entweder verschlusselt oder digital si- 
gniert werden. 

12. Verfahren nach Anspruch 11 ,. wobei: 

die Position der Markierung mit einer Genauigkeit 
is erfasst wird, die die Positionsgenauigkeit ubertrifft, 
mit der die Markierung erzeugt werden kann. 

13. Verfahren zum Herstellen einer Platte, das die fol- 
genden Schritte umfasst: 

20 

Erzeugen einer reflektierenden Schicht auf ei- 
ner Platte; 

Erzeugen einer Markierung auf der reflektie- 
25 renden Schicht, wobei die Markierung nicht Teil 

der auf der Platte aufgezeichneten Daten ist; 

Erfassen einer Position der Markierung; und 

so Schreiben von Informationen, die die Position 

der Markierung auf der Platte anzeigen; 

dadurch gekennzeichnet, dass: 
die Informationen, die die Position der Markierung 
35 anzeigen, unter Verwendung eines geheimen 
Schlussels entweder verschlusselt Oder digital si- 
gniert werden. 

14. Verfahren nach Anspruch 13, wobei: 

40 die Position der Markierung mit einer Genauigkeit 
erfasst wird, die die Positionsgenauigkeit ubertrifft, 
mit der die Markierung erzeugt werden kann. 

15. Platte, die eine reflektierende Schicht umfasst, auf 
45 der eine Markierung erzeugt wird und die Informa- 
tionen aufweist, die eine Position der Markierung 
auf der reflektierenden Schicht anzeigen, wobei die 
Markierung nicht Teil der auf der Platte aufgezeich- 
neten Daten ist; 

so dadurch gekennzeichnet, dass: 

die Informationen, die die Position der Markierung 
anzeigen, unter Verwendung eines geheimen 
Schlussels entweder verschlusselt oder digital si- 
gniert werden. 

55 

16. Platte nach Anspruch 15, wobei: 

die Position der Markierung der auf der Platte auf- 
gezeichneten Informationen Informationen sind, 
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die mit einer Genauigkeit gemessen werden, die die 
Positionsgenauigkeit iibertrifft, mit der die Markie- 
rung erzeugt werden kann. 

17. Wiedergabevorrichtung fur eine Platte (9102), die 
eine reflektierende Schicht umfasst, auf der eine 
Markierung (91 03) ausgebildet ist, die nicht Teil der 
auf der Platte aufgezeichneten Daten ist, und die 
Informationen aufweist, die eine Position der Mar- 
kierung (9103) auf der reflektierenden Schicht an- 
zeigen, und die umfasst: 

eine Positionsinformations-Leseeinrichtung 
(9101), die die Informationen liest, die eine Po- 
sition der Markierung anzeigen, und 

eine Markierungsleseeinrichtung (91 06), die ei- 
ne tatsachliche Position einer Markierung 
(9103) auf der Platte (9102) liest; 

dadurch gekennzeichnet, dass: 

die Informationen, die die Position der Markie- 
rung (91 03) anzeigen, unter Verwendung eines 
geheimen Schlussels entweder verschlusselt 
Oder digital signiert werden; 

wobei die Positionsinformations-Leseeinrich- 
tung eine Entschlusselungseinrichtung (9105) 
umfasst, die die Informationen entschlusselt, 
die die Position der Markierung (9103) anzei- 
gen; und 

wobei die Wiedergabevorrichtung des Weite- 
ren eine Vergleichs/Entscheidungseinrichtung 
(9107) umfasst, die die tatsachliche Position, 
die von der Markierungsleseeinrichtung (9106) 
gelesen wird, mit den Informationen vergleicht, 
die die Position der Markierung (9103) anzei- 
gen, die von der Positionsinformations-Le- 
seeinrichtung (9101) gelesen wird, urn zu ent- 
scheiden, ob die Daten auf der Platte (9102) 
wiedergegeben werden. 

18. Wiedergabevorrichtung nach Anspruch 17, wobei: 
die Position der Markierung (9103) der auf der Plat- 
te (9102) aufgezeichneten Informationen Informa- 
tionen sind, die mit einer Genauigkeit gemessen 
werden, die die Positionsgenauigkeit iibertrifft, mit 
der die Markierung (9103) erzeugt werden kann. 

19. Wiedergabevorrichtung nach Anspruch 17, wobei 

die Informationen, die die Position der Markie- 
rung (91 03) anzeigen, unter Verwendung eines 
geheimen Schlussels einer Verschlusselungs- 
funktion mit offentlichem Schlussel verschliis- 
selt werden, und 
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die Entschlusselungseinrichtung (9105) die In- 
formationen, die die Position der Markierung 
(9103) anzeigen, unter Verwendung eines 6f- 
fentlichen Schlussels entschlusselt, der dem 
5 geheimen Schliissel entspricht. 

20. Wiedergabevorrichtung nach Anspruch 17, wobei 
die Entschlusselungseinrichtung (9105) umfasst: 

10 eine erste Entschlusselungseinrichtung, die 

Software-Merkmalinformationen, die Merkma- 
le von Software-lnhalten betreffen, die auf die 
Platte (9102) geschrieben sind, und einen 6f- 
fentlichen Unterschlussel einer Verschliisse- 

15 lungsfunktion mit offentlichem Schlussel unter 

Verwendung eines offentlichen Hauptschlus- 
sels entschlusselt, der einem geheimen Haupt- 
schlussel der Verschlusselungsfunktion mit of- 
fentlichem Schlussel entspricht; und 

20 

eine zweite Entschlusselungseinrichtung, die 
die Informationen, die die Position der Markie- 
rung (91 03) anzeigen, unter Verwendung eines 
geheimen Unterschlussels entschtussett, der 
25 dem offentlichen Unterschlussel entspricht. 

21. Wiedergabevorrichtung nach Anspruch 20, wobei 
die Verschliisselungsfunktion mit offentlichem 
Schlussel eine RSA-Funktion ist. 

30 

Revendlcations 

1 . Dispositif de formation de marque comprenant : 

35 

un moyen de marquage (81 3) destin6 k former 
une marque (584) sur un film r6fl6chissant 
(802) d'un disque (800), dans lequel la marque 
ne fait pas partie des donn^es enregistr6es sur 

40 ie disque ; 

un moyen de detection de position de marque 
(596) destine a detecter une position de ladite 
marque (584) sur ledit film r6fl6chissant (802) 
dudit disque (800) ; et 

45 un moyen d'ecriture d'information de position 

(813) destine a ecrire ('information indiquant la- 
dite position de ladite marque (584) sur ledit 
disque (800) ; 

so caracterise en ce que 

ladite information indiquant ladite position de 
ladite marque (584) est soit cryptee, soit signee nu- 
mSriquement au moyen d'une cl6 de cryptage (876) 
par ledit moyen d'ecriture d'information de position 
55 (813). 

2. Dispositif de formation de marque selon la revendi- 
cation 1 , dans lequel 
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ledit moyen de detection de position de mar- 
que (596) mesure ladite position de ladite marque 
(584) avec une precision depassant la precision de 
positionnement avec laquelle ladite marque (584) 
peut etre form£e. 

3. Dispositif de formation de marque selon la revendi- 
cation 1 , dans lequel 

ledit moyen d'ecriture d'information de posi- 
tion (813) comprend un moyen de cryptage destine 
a crypter ladite information indiquant ladite position 
de ladite marque (584) en utilisant une cle secrete 
d'une fonction de cryptage a cle publique ou une cle 
secrete d'une fonction de cryptage a cle secrete. 

4. Dispositif de formation de marque selon la revendi- 
cation 3, 

dans lequel ledit moyen de cryptage 
comprend ; 

un premier moyen de cryptage destine a cryp- 
ter une information de caracteristiques logiciel- 
les concernant des caracteristiques de contenu 
de logiciel ecrite sur ledit disque et une cle pu- 
blique secondaire d'une fonction de cryptage a 
cle publique en utilisant une cle secrete princi- 
pal de ladite fonction de cryptage a cle 
publique ; et 

un deuxieme moyen de cryptage destine a 
crypter ladite information indiquant ladite posi- 
tion de ladite marque en utilisant une cle secre- 
te secondaire correspondant a ladite cle publi- 
que, et 

ledit moyen d'ecriture d'information de position 
ecrit un contenu crypte par ledit premier moyen 
de cryptage et par ledit deuxieme moyen de 
cryptage sur ledit disque. 

5. Dispositif de formation de marque selon la revendi- 
cation 1 , dans lequel 

ledit moyen d'ecriture d'information de posi- 
tion comprend un moyen de signature numerique 
destine a appliquer une signature numerique a la- 
dite information indiquant ladite position de ladite 
marque et ecrit I'information concernant un resultat 
de ladite signature numerique par ledit moyen de 
signature numerique sur ledit disque. 

6. Dispositif de formation de marque selon la revendi- 
cation 5, dans lequel ledit moyen de signature nu- 
merique utilise une cle secrete (879) d'une fonction 
de cryptage a cle publique (880) pour ladite signa- 
ture numerique. 

7. Dispositif de formation de marque selon la revendi- 
cation 5, dans lequel 

ledit moyen de signature numerique 
comprend ; 



un premier moyen de signature numerique des- 
tine a appliquer une signature numerique a Tin- 
formation de caracteristiques logicielles con- 
cernant les caracteristiques du contenu de lo- 
s giciel ecrite sur ledit disque et a une cl6 publi- 

que secondaire d'une fonction de cryptage a 
cle publique ; et 

un deuxieme moyen de signature numerique 
destine a appliquer une signature numerique a 
10 ladite information indiquant ladite position de 

ladite marque en utilisant une cl6 secrete se- 
condaire correspondant a ladite cle publique 
secondaire, et ledit moyen d'ecriture d'informa- 
tion de position ecrit un resultat de ladite signa- 
ls ture numerique par ledit premier moyen de si- 
gnature numerique et un resultat de ladite si- 
gnature numerique par ledit deuxieme moyen 
de signature numerique sur ledit disque. 

20 8. Dispositif de formation de marque selon la revendi- 
cation 1 , dans lequel 

ledit moyen d'ecriture d'information de posi- 
tion 6crit de maniere coexistante une information 
telle qu'elle est traitee au moyen de plusieurs sortes 

25 de techniques de cryptage ou de techniques de si- 
gnature numerique par rapport a une meme infor- 
mation de position. 

9. Dispositif de formation de marque selon les reven- 
30 dications 3, 4, 6 ou 7, dans lequel ladite fonction de 

cryptage a cl6 publique est une fonction RSA. 

10. Dispositif de formation de marque selon Tune quel- 
conque des revendications 1 a 9, dans lequel ledit 

35 disque est construit en stratifiant deux disques en- 
semble. 

1 1 . Proced6 de formation d'une marque sur un disque, 
dans lequel la marque ne fait pas partie des don- 

40 nees enregistrees sur le disque, comprenant les 
etapes consistant a : 

former une marque, sur un film r6f!6chissant 
d'un disque ; 

45 detecter une position de ladite marque sur ledit 

film reflechissant dudit disque ; et 
ecrire I'information indiquant ladite position de 
ladite marque sur ledit disque ; 

so caracterise en ce que 

ladite information indiquant ladite position de 
ladite marque est soit crypt§e, soit signee numeri- 
quement au moyen d'une c!6 de cryptage. 

55 12. Procede selon la revendication 11, dans lequel 

ladite position de ladite marque est detectee 
avec une precision depassant la precision de posi- 
tionnement avec laquelle ladite marque peut etre 
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formee. 

1 3. Proceed de fabrication d'un disque, comprenant les 
Stapes consistant a : 

former un film r6f!6chissant sur un disque ; 
former une marque sur ledit film refl^chissant, 
dans lequel la marque ne fait pas partie des 
donnees enregistr6es sur le disque ; 
detecter une position de ladite marque ; et 
ecrire reformation indiquant ladite position de 
ladite marque sur ledit disque ; 

caracterise en ce que 

ladite information indiquant ladite position de 
ladite marque est soit cryptee, soit signee numeri- 
quement au moyen d'une cie secrete. . 

14. Proced6 selon la revendication 13, dans lequel 

ladite position de ladite marque est detect6e 
avec une precision d6passant la precision de posi- 
tionnement avec laquelle ladite marque peut etre 
formee. 

15. Disque comprenant un film reflechissant sur lequel 
une marque est formee et comportant une informa- 
tion indiquant une position de ladite marque sur ledit 
film refiechissant, dans lequel la marque ne fait pas 
partie des donn6es enregistrSes sur le disque ; 

caracterise en ce que 

ladite information indiquant ladite position de 
ladite marque est soit cryptee, soit sign6e numeri- 
que au moyen d'une cie secrete. 

16. Disque selon la revendication 15, dans lequel 

ladite position de ladite marque de ladite in- 
formation enregistree sur ledit disque est une infor- 
mation mesuree avec une precision depassant la 
precision de positionnement avec laquelle ladite 
marque peut etre formee. 

17. Dispositif de duplication d'un disque (9102) qui 
comprend un film refiechissant sur lequel une mar- 
que (9103), qui ne fait pas partie des donnees en- 
registrSes sur le disque, est formee et qui comporte 
une information indiquant une position de ladite 
marque (9103) sur ledit film reflechissant, 
comprenant : 

un moyen de lecture d'information de position 
(9101) destine k lire ladite information indi- 
quant une position de ladite marque ; et 
un moyen de lecture de marque (91 06) destine 
a lire une position reelle d'une marque (9103) 
sur le disque (9102) ; 

caracterise en ce que 

ladite information indiquant ladite position de 



ladite marque (9103) est soit cryptee, soit sign§e 
numeriquement au moyen d'une cl6 secrete ; 

ledit moyen de lecture d'information de position 
5 comprend un moyen de decryptage (9105) 

destine k decrypter ladite information indiquant 
ladite position de ladite marque (91 03) ; et 
ledit dispositif de duplication comprend en 
outre un moyen de comparaison/estimation 
10 (91 07) destine k comparer ladite position r6elle 

lue par ledit moyen de lecture de marque 
(9106) a ladite information indiquant ladite po- 
sition de ladite marque (9103) lue par ledit 
moyen de lecture d'information de position 
'5 (9101) afin de decider si une duplication des 

donnees sur le disque (9102) est possible. 

18. Dispositif de duplication selon la revendication 17, 
dans lequel 

20 ladite position de ladite marque (9103) de la- 

dite information enregistree sur ledit disque (9102) 
est une information mesuree avec une precision de- 
passant la precision de positionnement avec la- 
quelle ladite marque (9103) peut §tre formee. 

25 

19. Dispositif de duplication selon la revendication 17, 
dans lequel 

ladite information indiquant ladite position de 
30 ladite marque (9103) est cryptee au moyen 

d'une cie secrete d'une fonction de cryptage k 
cie publique, et 

ledit moyen de decryptage (9105) decrypte la- 
dite information indiquant ladite position de la- 
ss dite marque (91 03) en utilisant une cie publique 
correspondant k ladite cl6 secrete. 

20. Dispositif de duplication selon la revendication 1 7, 
dans lequel 

^0 ledit moyen de decryptage (91 05) comprend ; 

un premier moyen de decryptage destine k d6- 
crypter ('information de caract6ristiques logi- 
cielles concernant les caracteristiques de con- 
45 tenu de logiciel 6crite sur ledit disque (91 02) et 

une cie publique secondaire d'une fonction de 
cryptage a cie publique en utilisant une cie pu- 
blique principale correspondant a une cie se- 
crete principale de ladite fonction de cryptage 
so a cie publique ; et 

un deuxieme moyen de decryptage destine k 
decrypter ladite information indiquant ladite po- 
sition de ladite marque (91 03) en utilisant une 
cie secrete secondaire correspondant k ladite 
55 cie publique secondaire. 

21. Dispositif de duplication selon la revendication 20, 
dans lequel ladite fonction de cryptage k cie publi- 
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que est une fonction RSA. 
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Fig. 3 
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Fig. 4 
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Fig. 5 
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Fig. 6 
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Fig. 7 
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Fig. 8 
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Fig. 12 




rv ✓✓✓✓✓✓✓ if*-* i ^p>z / // // // /i 



44 



EP 0 741 382 B1 




45 



EP 0 741 382 B1 




i i = <ir.Mu i: 



: I ^ \ I O lid. 3 II 



46 



EP 0 741 382 B1 




47 



EP 0 741 382 B1 




48 



EP 0 741 382 B1 



x 

0) 
O , 
<0 ' 



CO 
Q 
Q 

ULI 

$ 

O 
-j 
a. 

Q 

>: 



UJ 



UJ 

_j 

CO 

f£ 

CO 
CO 
UJ 

en 
a 
a 
< 

o 
o 

CL 



> 

O 
UJ 
-J 
u. 

Lii 

CC 

<: 

Q 



;moN 


CLOCK 
NUMBER 




m+257 


m+277 | 


m+230 




m+190 


CO 
CM 
+ 

E 




I 






£L 


U 

w 
























END 


ADDRDSS 




c 


n+12 


CM 
CM 

2 


* ■ 


n+1 


n+13 


n+25 


i 






POSITION 


CLOCK 
NUMBER 




CNJ 

+ 
E 


CM 
+ 

E 


m+4 


• • 


m+36 


m+120 














CO 




















START 


ADDRDSS 




c 


n+12 


SI 




n+1 


n+13 


n+25 




n+9 




MARK 
NO. 












CM 


CM 


CM 




o 


o 



o 

CO 



O) 

• MM 

LL 



CO 
Q 
UJ 



CD 

UJ 



Ui 
—J 
CD 
< 
H 
CO 
CO 
UJ 
CC 

a 
o 
< 

z 
o 

o 

0- 



UJ 



UJ 
DC 

t 

Q 



*2 



I* 



CO 

5 



* . 
$ Z 



CM 



9 

E 



CO 
c 

< 



+ 
£ 

CM 

CO 
CM 

" + 

c 



o 
o 

CO 

+ 
E 



CO 

c 



E 



3 

+ 

c 



in 

+ 
E 



CM 



O 

m 

CM 
+ 

E 



CO 
r- 

2 



in 

CO 

+ 
E 



CO 



CM 



8 

+ 

E 



CM 
+ 
C 



CM 



+ 



1 — t ^1 ~ 1 11 



49 



EP 0 741 382 B1 



Fig. 18 



c 



FLOWCHART FOR DISK CHECK BY ONE-DIRECTION 
FUNCTION (RSA ALGORITHM OR ELLIPTIC FUNCTION) 



FORMING 



I 



3 



ENCRYPTION OF DATA M BY ONE-DIRECTION 
FUNCTION 

EXAMPLE USING RSA FUNCTION n=pXq (SECRET) 
LEAST COMMON MULTIPLE 

eXd=1 modLCM (P— 1,q— 1) 
d : 256bits or over (SECRET) 
n : 256bitsorover (PUBLIC) 

C=M d mod n 



DETECTION BY 
DISK PHYSICAL 

FEATURE 
INFORMATION 
DETECTING 
MEANS 




CIPHERTEXTS 



VERIFICATION 




DECRYPTION OF CIPHERTEXT S BY 
ONE-DIRECTION FUNCTION 

EXAMPLE USING RSA FUNCTION 

e : 3 over (PUBLIC) 

n : 256bitsorover (PUBLIC) 

M=C e mod n 



2F 



PLAINTEXT: M 
(DISK PHYSICAL FEATURE INFORMATION) 




£ 



COMPARISON OF M WITH 
MEASURED DISK PHYSICAL 
FEATURE INFORMATION 



DETECTION BY 
DISK PHYSICAL 

FEATURE 
INFORMATION 
DETECTING 
MEANS 



.OK ? 




STOP 



RUN 



50 



EP 0 741 382 B1 



O 

S CO 
-J CO 

S3 « 

O-CC I 

rr in 

ui r 4 



<o 

co 
5 
cc 

i 

2 
O 
CO 
LU 
CO 
CO 
UJ 
CC 
Q 

o 
< 
-J 



CO 

< 



w iG & 



§ 

tr 



(A 



! 

\ 

s 

00 

co 3; o 

CSJ CM CO 



t8 



u. 
o 
w 

2 

? «0 
5 UJ 

is 

P 



G 



D 

o 

4 



S i « 



5 s 

DC- * 



CO z 

£ 8 

**- III 



B a u; uj 
t s | § 

2 

O 
Q 
Ui 

o 

Q 

8 

CL 



o 




; , 1 ; , 1 ; 6 4 , - ; \ 

1 • * * » \ * * » *» 

\ 1 % * * * * \ * * *. * 

\ » \ • * \ * * b * * - . 



Ll 




7 / ; • ; : • ; • ; ;.. ; ; 



o 

GO 



51 



EP 0 741 382 B1 



Fig. 2 0 



PROGRAM IN REPRODUCTION 
APPARATUS FOR DETECTING 
OPTICAL MARK WITH INCREASED 
ACCURACY OR STABILITY 



Yes 



865a 



RECOVER ENCRYPTED 
POSITION 
INFORMATION 



DECRYPTION OR 
RlftMATtlRF VERIFICATION 



ROUTINE FOR 
CONSTRUCTING ! 
POSITION 
INFROMATION 
TABLE 
-v865b 



CONSTRUCT POSITION INFORMATION 
TABLE (OPTICAL MARK NUMBER: m, 
ADDRESS: nm. START/END FRAME SYNCl/ 
NUMBER, CLOCK NUMBER: Tsm. Tern ^ 



1 



8Q5c 



ROUTINE FOR } 
DETECT ADDRESS :ns-1 MEASURING J 

en ' CIRCUIT DELA\j 

M TIME Il 



COUNT FRAME SYNC NUMBER 
AND CLOCK 



READ CIRCUIT DELA*V* 865h 
TIME FROM ROM 




k 865y 



MEASURE AND STORE 
CIRCUIT DELAY TIME : TD 



Ml 



865g 



m=0 



,865x 



ROUTINE FOR 
DETECTING PIRATED; 
DISK 



CORRECT CIRCUIT DELAY 
TIME TD ( 

Tsm - To = Ts'm 
TEm - Td a TE'm 



865n 



A 

READ TOLERANCE 866, tA AND 
PASS COUNT. 
ERROR DETECTION COUNT 
ALLOWABLE UMT: NA, 



-865p 



865q 



CHECK IF POSITION INFORMATION 
IS WITHIN TOLERANCE 

tsm - tA < Ts'm < Tsm + u 
tEm • U < TE'm < TEm + tA 




JUDGE AS 
LEGITIMATE DISK 



JUDGE AS 
ILLEGAL DISK 



(runJ 



(stop) 



m= 







DETECT ADDRESS : nm-1 



ROUTINE FOR DETECTING 
ADDRESS AND CLOCK COUNt 
FOR OPTICAL MARKm 



COUNT FRAME SYNC NUMBER 
AND CLOCK 




MEASURE SfAATFHAME 
SYNC NUMBER CLOCK 
COUNT TSM AND END 
CLOCK COUNT TME 



I /VM HUT CO A IJC CVKtr MIIUDCO 1 



52 



EP 0 741 382 B1 



>JH0MI3N 




i i pv: r 



53 



EP 0 741 382 B1 



22 



PRODUCE MARK WITH RANDOMLY 
DROPPED PORTIONS ON REFLECTIVE FILM 



I 



MEASURE MARK POSITION 
INFORMATION ^ 



MEASUREMENT OF POSITION 
INFORMATION 
-735b 



COMPRESS' *" 7 — 



-735d 



735e 



OBTAIN COMPRESSED, 
ECC-CODED POSITION INFORMATION HfMl 



MESSAGE RECOVERY TYPE 
ENCRYPTION(SIGNATURE) OF 
POSITION INFORMAT ION 



SET SECRET KEYS d (512 or 1024 bits), p, q, 695^^ 695 9 



ENCRYPTION (SIGNATURE 
COMPUTATION) OF POSITION 
INFORMATION BY RSA FUNCTION, A 
MESSAGE RECOVERY TYPE FUNCTION 
CIPHERTEXT: C=M d modn 



695b 



RECORD CIPHERTEXT C ON DISK 



•695d 



* 



SHIP DISK 



LOAD DISK 



•735k 



-735m 



ENCRYPTION (SIGNATURE 
V VERIFICATIO NS OF CIPHERTEXT) 



REPRODUCE CIPHERTEXT,^ 69Be 



SET PUBLIC KEYS e, n 
e:3 0R LARGER INTEGER 
n: 512 OR 1024 BITS 



T 



698f 



ENCRYPTION 



(SIGNATURE VERIFICATION 



698b 



-698g 



* Jerror check ; — (stop) 



Yes 



I DISK CHECK ROUTINE - 



-735w 



-735a 



695 



698 



54 



EP 0 741 382 B1 



Fig. 23 



MEASUREMENT OF POSITION INFORMATION 

-735b 



MEASURE POSITION INFORMATION OF DISK MARK 



COMPRESS* 



•735d 



OUTPUT POSITION INFORMATION H 




735a 



3" 



SET SECRET 
KEYS X AND K 
(X:128 BITS 
OR OVER) 



SIGNATURE • 
" 2 =x 3 +ax+b mod P 



SIGN ATURE FOR POSITION 
INFORMATION 



ELLIPT! FUNCTION y* 
f(x) : ONE-DIRECTION FUNCTION 
G : SYSTEM PARAMETER, A POINT ON ELLIPTIC 

FUNCTION (FIXED VALUE: PUBLIC) 
R*«f(R) 

Q : ( PUBLIC ) 

H : PLAINTEXT CONTAINING FIRST PHYSICAL 
FEATURE INFORMATION, OR ITS COMPRESSION 
VALUE (PUBLIC ) 



2. CIPHERTEXT1 : R=f(KXG) 

4. CIPHERTEXT 2 : S=(KXR'-H)X 1 mod Q 



•73Sh 



RECORD GENERATED SIGNATURES R AND S AND 
PLAINTEXT H OF POSITION INFORMATION 



T. 



- 735f 



SHIP DISK 



-735k 



LOAD DISK f ^W3Sm 



REPRODUCE SIGNATURES R AND S AND 
POSITION INFORMATION H (PLAINTEXT) 



Y^>735f 



SET PUBUC 
KEYS Y, G, Q 



SIGNATURE DETECTION COMPUTATION 
Y=XXG 

A^SR-'modQ 
B=HR' 1 modQ 
f(AXY+BXG) 



735p 

SIGNATURE 
VERIFICATION FOR 
POSITION 
INFORMATION 




•735s 



735u 



JUDGE AS 
DUPLICATED DISK 

( STOP ^P-^ 



■735n 



DISK CHECK : 
ROUTINE | 



735w 



55 



EP 0 741 382 B1 



Fig. 24 



® 



EXPAND H 



,736a 



OUTPUT POSITION INFOR MATION 

* 



DISK CHECK 
ROUTINE 



,736b 



MEASURE MARK POSITION INFORMATION ON DISK 

I 



,736c: 



COMPARE OUTPUT POSITION INFORMATION WITH 
MEASURED POSITION INFORMATION 




'736di 



736fl 



DISPLAY AS 
DUPLICATED DISK 

( STOP f 



EXECUTE PROGRAM OR OUTPUT DATA. 



,736h 



56 



EP 0 741 382 B1 




EP 0 741 382 B1 



CD 




i ^ u iiiifi i ,t ( i i ui "i i s d *ti i «* i 1 1 o iii ui b ft 



58 



EP 0 741 382 B1 




CD 

CC 
ID 
O 
Z 

O 
-j 

cc 

O 



CD 

5-r— 



5 

CD 

DC 
UJ 

O 



CM 

Ll 



cc 
o 

u. 

UJ 

> 
< 

z 
o 

& 

m 
H 
Hi 
Q 

-I 
< 

O 
CO 

o 
z 

cc 
< 

cc 

UJ 



co 
gc 

LL 



T g 

CO 

z 
g 

H 
O 
UJ 
h- 
UJ 
Q 

o 

Z 
CC 

< 

CC 
LU 

CO 
CC 
ll 



o 



t 



CO 

< 

Q 
Ui 
Q 
CC 
< 

UJ 

cc 



UJ 

z 



c 



CO 
CO 
UJ 

JE. 



< 



CO 
CO 
UJ 

cc 

Q 
Q 
< 



in 

CM 
Ui 

5 
< 
CC 
LL 



LU 

I 

CC 



CO 
UJ 

5 
< 

cc 

LL 



CM 
Ui 



Ui 
< 

CC 
LL 



CO 
CO 
UJ 

cc 
o 
a 
< 



o 

UJ 

< 
cc 



g 

H 
CO 

O 

0. 
Ui 
5 
< 

cc 



< 
z 
g 

CO 

a 
z 

N 

O 
CC 
X 

a 
z 

& 

Ui 

2 
< 
cc 



E 

3 



^ < 
z 
g 

CO 



a 
z 
g 

& 

a 
O 

QC 

a. 

UJ 

cc 



in 



A A 



a 

rect 



*§8| 



5 



ft 

CO 

4 



2 

CM 

T 



x co 

o 5 
Si <© 

-J UJ 

p 

5 u. 
< u_ 
2 w 



O Ui 

-i S 

Ui 

Z 3 
^ 2 



1 

ba: 

CO UJ 
O CD 
A- 5 
Ui ZD 

I 2 

CC 
LL 



co 



usnoossvd 



3 iNVtmoi 



U3AV1 



CO £ 
o ffl 

q co 

in 

CM 



Ui 

2 
< 

cc 

LL 

CC 
Ui 
CL 



QC 
O 

& 
Ui 

CO 

CC 
Ui 
Q_ 

X 

< 
2 

CO 
CM 



X 

< ^ 

2 X 



Ui 



-Z98 



-(Svaect 

USA*] 3NO; 



— CO 
cc ui 



< 
O 

CC CO 

< o 

So. 



ST. I l_ »-v II 




UJ 



< 
X 
Ui 

< 

a 



59 



EP 0 741 382 B1 




X 

I 

O 00 
O oo 

6 " 

CO 

in 



2 Ui 

-J cc 

O w 

m a. 

CD 
CO 



§ 

O 

Ui 
CO 

en 

LD 
Q. 

X 
< 

CO 

CM 



5 x 
o at 
o x 

o 

CO 



04 O ^ 

io o 
— o «- 



cc 

O cc 
oc £ 

UI 



y 



111 
—I 
a. 



UJ 

% 

Q 



60 



EP 0 741 382 B1 




1 i 


* i 




ONINI9WO0 




61 



EP 0 741 382 B1 



CM 
00 



i 

Q 

g 

a 

a: 

1 
b 

-J 



1 

CO 

I 

e 



111 V 



a' 



ill 

g§ 

O 2 
UJ " 

cc 



a 
O 
oc 

lii 

a. 



X 
UJ 

z 



E 
E 



a 

2 
CC 
UJ 

z 
o 



£ 



E 



E 

£ 
tn 



m 



E 

tn 
in 

CM 



E 

CM 



E 



E 

E 
to 



S 

CM 
CO 
CM 



£ 
in 



£ 

CO 



£ 

CO 



E 
E 
tn 



CM 



E 

if) 

cm" 



£ 
o 



E 
in 



£ 

£ 
m 

CM 



in 



£ 
m 

CM 



£ 

8 



E ; 
O 



E 

£ 
o 



CM 
CO 



£ 

o 
in 



£ 
o 



E 

8 



£ 

CO 

© 

y 



5 



a. 

§ 



o 

CO 

LE 



o 
o 



Ui 

o 

8 



...5 



I 



CO 



1— 1— 1— 




q It 




5 






8§ 


O 

a 


* 



62 



EP 0 741 382 B1 




63 



EP 0 741 382 B1 




iu. a uj ii i ,vi < a- 



64 



EP 0 741 382 B1 




65 



EP 0 741 382 B1 




66 



EP 0 741 382 B1 




67 



EP 0 741 382 B1 




68 



EP 0 741 382 B1 




69 



EP 0 741 382 B1 




EP 0 741 382 B1 




71 



EP 0 741 382 B1 




72 



EP 0 741 382 B1 



Fig. 41 



MARKING 
READING 
MEANS 



MARKING 
9103 



9106 




9102 



9104 

BARCODE OF 
MARKING POSITION 
INFORMATION 



POSITION 
INFORMATION 
READING MEANS 



DECRYPTING 
MEANS 



9101 



9105 



^"9107 

COMPARING/JUDGI 
NG MEANS 




Yes 



No 



^x/9108 
REPRODUCTION SIGNAL 



9109 



REPRODUCTION 
STOP SIGNAL 



73 



EP 0 741 382 B1 



Fig. 42 



INSTALLATION START 




CONNECT TO PERSONAL , 
COM PUTER NETWORK 

I 




INPUT USER ID, 
SOFTWARE ID 




901d 



5s(m? 



901 f 



TRANSMIT DRIVE 
ID 



,901h 

.DISK ID EXIST^>"^ (STQP) 



TRANSMIT DISK ID 



COMPUTE PASSWORD WITH // 
SUB PUBLIC KEY AND 
COMPARE WITH DRIVE ID 



901k 




PASSWORD ISSUING CENTER 



£ 



COMPUTE PASSWORD WITH 
SUB PUBLIC KEY AND 
COMPARE WITH DISK ID 



901m 





901g 



GENERATE PASSWORD BY 
COMPUTING CIPHERTEXT 
OF DRIVE ID AND 
SOFTWARE ID USING SUB 
SECRET KEY 




GENERATE PASSWORD BY 
COMPUTING CIPHERTEXT 
OF DISK ID AND SOFTWAE 
ID USING SUB SECRET KEY 



74 



